JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.176.92.203

213.176.92.203

Neutral Activity

37 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

NetCrafters OU

Usage Type

Data Center/Web Hosting/Transit

ASN

AS203273

Hostname(s)

fairpear.ptr.network

Domain Name

netcrafters.host

Country

🇫🇮 Finland

City

Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

213.176.92.203 has been reported 37 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 213.176.92.203:

This IP address has been reported a total of 37 times from 26 distinct sources. 213.176.92.203 was first reported on December 19th 2024, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 kivitendo.de	2025-01-21 12:06:57 (1 year ago)	[Tue Jan 21 13:02:28.101023 2025] [access_compat:error] [pid 375332:tid 139789743404800] [client 213 ... show more [Tue Jan 21 13:02:28.101023 2025] [access_compat:error] [pid 375332:tid 139789743404800] [client 213.176.92.203:42828] AH01797: client denied by server configuration: /var/www/kivitendo-erp-git/users/user-dark-features, referer: http://185.11.139.24/users/user-dark-features [Tue Jan 21 13:02:39.088616 2025] [auth_basic:error] [pid 375332:tid 139789466576640] [client 213.176.92.203:60934] AH01618: user admin not found: /mgmt/tm/util/bash, referer: http://185.11.139.24/mgmt/tm/util/bash [Tue Jan 21 13:06:56.122977 2025] [access_compat:error] [pid 375332:tid 139789768582912] [client 213.176.92.203:53328] AH01797: client denied by server configuration: /var/www/kivitendo-erp-git/users/user-dark-features ... show less	Brute-Force Web App Attack
🇩🇪 DV4	2025-01-21 06:52:50 (1 year ago)	Unauthorized connection attempt to port 8140 from 213.176.92.203	Port Scan
🇩🇪 raspi4	2025-01-20 21:44:18 (1 year ago)	Fail2Ban Ban Triggered	Brute-Force Web App Attack
🇺🇸 Starburst SysOp Team	2025-01-20 20:13:34 (1 year ago)	(mod_security-custom) mod_security (id:400010) triggered by 213.176.92.203 (SE/Sweden/bot.censys.io) ... show more (mod_security-custom) mod_security (id:400010) triggered by 213.176.92.203 (SE/Sweden/bot.censys.io): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Mon Jan 20 20:13:30.059015 2025] [:error] [pid 2339064:tid 2339089] [client 213.176.92.203:33408] [client 213.176.92.203] ModSecurity: Access denied with connection close (phase 1). RBL lookup of 203.92.176.213.rbl.malware.expert succeeded at REMOTE_ADDR. [file "/usr/local/apache/modsecurity-cwaf/custom_user.conf"] [line "3"] [id "400010"] [msg "Malware host detected by rbl.malware.expert"] [hostname "157.173.193.203"] [uri "/autodiscover/autodiscover.json"] [unique_id "Z46uaW0zZhiYsWEZbkKZjQAAABM"] show less	Hacking
Anonymous	2025-01-20 20:11:28 (1 year ago)	fail2ban:piguard2:14,18	Port Scan Brute-Force
🇺🇸 vestibtech	2025-01-19 17:28:25 (1 year ago)	[Sun Jan 19 10:28:17.983157 2025] [auth_basic:error] [pid 2235575:tid 2235991] [client 213.176.92.20 ... show more [Sun Jan 19 10:28:17.983157 2025] [auth_basic:error] [pid 2235575:tid 2235991] [client 213.176.92.203:51620] AH01618: user admin not found: /mgmt/tm/util/bash [Sun Jan 19 10:28:24.980152 2025] [auth_basic:error] [pid 2235594:tid 2236068] [client 213.176.92.203:48280] AH01618: user admin not found: /mgmt/tm/util/bash ... show less	Brute-Force
🇩🇪 Nightreaver	2025-01-19 06:56:37 (1 year ago)	213.176.92.203 - - [19/Jan/2025:07:56:29 0100] "GET /server-info.action?bootstrapStatusProvider.app ... show more 213.176.92.203 - - [19/Jan/2025:07:56:29 0100] "GET /server-info.action?bootstrapStatusProvider.applicationConfig.setupComplete=0[...] show less	Bad Web Bot Web App Attack
🇸🇪 webbfabriken	2025-01-19 06:42:04 (1 year ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
🇬🇧 webnestify	2025-01-18 15:53:38 (1 year ago)	[Webnestify Honeypot - UK] Unauthorized connection attempt on port 1337.	Port Scan Hacking Brute-Force
🇩🇪 taivas.nl	2025-01-16 15:30:06 (1 year ago)	General bad request	Bad Web Bot
🇮🇳 Mr.Singh	2025-01-13 06:30:31 (1 year ago)	NFT blocked 213.176.92.203 after 3 rejections on 13-Jan-2025.	Port Scan Brute-Force
Anonymous	2025-01-11 10:57:10 (1 year ago)	Fail2ban Nginx log integration.	Port Scan Brute-Force SSH
🇱🇹 Evag Touf	2025-01-09 07:55:40 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 213.176.92.203 (SE/Sweden/-): (CF_ENAB ... show more (mod_security) mod_security triggered on hostname [redacted] 213.176.92.203 (SE/Sweden/-): (CF_ENABLE) show less	SQL Injection
🇱🇹 im	2025-01-09 05:58:04 (1 year ago)	HTTP tcp/10000 tcp/10250 tcp/10443 tcp/1337 tcp/2083 tcp/2376 tcp/3780 tcp/3790 tcp/4433 tcp/444 tcp ... show more HTTP tcp/10000 tcp/10250 tcp/10443 tcp/1337 tcp/2083 tcp/2376 tcp/3780 tcp/3790 tcp/4433 tcp/444 tcp/4443 tcp/6443 tcp/7071 tcp/7443 tcp/8009 tcp/8080 show less	Port Scan
🇫🇷 echocity.online	2025-01-09 03:50:21 (1 year ago)	Domain : pleskcontrolpanel Rule : hack 2025-01-09 03:48:44 *hidden-privacy* GET /vendor/phpunit/ ... show more Domain : pleskcontrolpanel Rule : hack 2025-01-09 03:48:44 *hidden-privacy* GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php - 8880 - 213.176.92.203 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.4.15 - 404 0 2 64 - - show less	Hacking SQL Injection Brute-Force

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 194.14.74.207

🇮🇳 182.71.132.139

🇩🇴 179.53.50.204

🇸🇪 141.138.215.85

🇺🇸 136.83.55.91

🇺🇸 104.207.34.183

🇸🇪 93.158.91.37

🇺🇸 72.240.125.133

🇺🇸 65.111.2.250

🇽🇰 46.19.225.76

🇷🇺 45.15.252.80

🇳🇱 213.177.179.171

🇺🇸 147.185.132.161

🇺🇸 144.24.47.42

🇲🇦 105.155.60.89

🇧🇩 103.234.200.252

🇫🇮 95.217.139.6

🇲🇦 81.192.46.32

🇩🇪 45.90.99.21

🇰🇿 45.8.98.160