JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

3.92.75.11

Neutral Activity

Abuse confidence score ?

0% Low Risk

59 reports

31 reporters · latest 1 year ago

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-3-92-75-11.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

3.92.75.11 has been reported 59 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 3.92.75.11

Export CSV

This IP address has been reported a total of 59 times from 31 distinct sources. 3.92.75.11 was first reported on March 24th 2021, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2025-06-30 03:21:59 (1 year ago)	260 requests with url.path *.git/	Brute-Force Bad Web Bot
🇮🇩 Burayot	2025-06-30 02:40:56 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 3.92.75.11 (US/United States/ec2-3- ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 3.92.75.11 (US/United States/ec2-3-92-75-11.compute-1.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 Rip	2025-06-30 02:39:19 (1 year ago)	Automated reconnaissance attempt targeting restricted or sensitive paths. ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-06-30 02:35:46 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.92.75.11 (ec2-3-92-75-11.compute-1.amazonaws. ... show more (mod_security) mod_security (id:210492) triggered by 3.92.75.11 (ec2-3-92-75-11.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 22:35:41.977737 2025] [security2:error] [pid 978308:tid 978308] [client 3.92.75.11:43440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "muddypuddy.com"] [uri "/.git/"] [unique_id "aGH3_WE-TNRkp8cjS2jj9wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-30 01:50:56 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.92.75.11 (ec2-3-92-75-11.compute-1.amazonaws. ... show more (mod_security) mod_security (id:210492) triggered by 3.92.75.11 (ec2-3-92-75-11.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 21:50:49.843953 2025] [security2:error] [pid 2712051:tid 2712058] [client 3.92.75.11:38414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalbusinessschool.org"] [uri "/.env"] [unique_id "aGHtebl4s_VDrPAR7jnxQwAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-30 01:35:27 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 3.92.75.11 (ec2-3-92-75-11.compute-1.amazonaws. ... show more (mod_security) mod_security (id:210492) triggered by 3.92.75.11 (ec2-3-92-75-11.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 21:35:19.978058 2025] [security2:error] [pid 799440:tid 799440] [client 3.92.75.11:47682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homebuilt.org"] [uri "/.git/"] [unique_id "aGHp14ViM5_h8jjlxTgIRAAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ChamberofCommerce.com	2024-05-06 23:32:14 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇳🇬 Tobs007	2022-04-22 10:00:37 (4 years ago)	Portscanning TCP / UDP	Port Scan
🇳🇱 IP Analyzer	2021-05-17 15:15:02 (5 years ago)	Unauthorized connection attempt from IP address 3.92.75.11 on Port 80(HTTP)	Brute-Force
🇩🇪 Hiffo	2021-05-17 12:40:39 (5 years ago)	1621269638 - 05/17/2021 18:40:38 Host: 3.92.75.11/3.92.75.11 Port: 8080 TCP Blocked	Port Scan
🇿🇦 IrisFlower	2021-05-13 05:47:35 (5 years ago)	Unauthorized connection attempt detected from IP address 3.92.75.11 to port 81 [J]	Port Scan Hacking
🇲🇩 iHost	2021-05-12 08:31:26 (5 years ago)	Port Scan detected from 3.92.75.11 (US/United States/-). 3 hits in the last 246 seconds; Ports: ; ... show more Port Scan* detected from 3.92.75.11 (US/United States/-). 3 hits in the last 246 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: May 12 15:31:21 web1 kernel: Firewall: TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=3.92.75.11 DST=31.131.1.47 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=11314 PROTO=TCP SPT=42680 DPT=81 WINDOW=1024 RES=0x00 SYN URGP=0 May 12 15:31:21 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=3.92.75.11 DST=31.131.1.46 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=30063 PROTO=TCP SPT=42680 DPT=50081 WINDOW=1024 RES=0x00 SYN URGP=0 May 12 15:31:21 web1 kernel: Firewall: TCP_IN Blocked IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=3.92.75.11 DST=31.131.1.46 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=18083 PROTO=TCP SPT=42680 DPT=5003 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇪🇸 domotuto.com	2021-05-11 17:26:02 (5 years ago)	Mikrotik port scanner detected. EA4GKQ	Port Scan
🇺🇸 FireballDWF	2021-05-11 15:40:13 (5 years ago)	404 NOT FOUND	Web App Attack
Anonymous	2021-05-11 07:55:55 (5 years ago)	tcp 25461 5002 2200 8005 8999 997 8881 50001 3128 50081 87 92 8080 10002 10003	Port Scan

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.222

🇮🇩 160.22.126.54

🇺🇦 176.105.98.220

🇺🇸 162.216.149.180

🇺🇸 103.196.9.187

🇳🇱 93.123.109.6

🇲🇽 79.127.180.12

🇳🇱 77.91.71.90

🇩🇪 69.5.169.114

🇨🇦 68.183.201.66

🇮🇳 66.116.205.1

🇯🇵 47.91.21.231

🇩🇪 43.157.38.131

🇧🇪 198.235.24.204

🇺🇸 167.71.28.75

🇺🇸 162.216.149.76

🇺🇸 157.230.93.92

🇦🇴 154.71.187.81

🇭🇰 147.90.182.46

🇭🇰 104.208.88.23