92.117.89.231
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- 1&1 Telecom GmbH
- Usage Type
- Fixed Line ISP
- ASN
- AS8881
- Hostname(s)
- i5c7559e7.versanet.de
- Domain Name
- mein-1und1-domain.de
- Country
- 🇩🇪 Germany
- City
- Ludenscheid, North Rhine-Westphalia
Abuse Reports
Total reports
27 from
24 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:51128 dst:23
|
Port Scan | |
| 🇺🇸 onyxdev |
Honeypot (ssh): 1 login attempt.
|
Brute-Force SSH | |
| 🇧🇷 radardatelecom |
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot Web App Attack | |
| Anonymous |
Apache HTTP Server Directory Traversal.
|
Web App Attack | |
| 🇭🇷 bubausluge |
Blocked by https://aegis.hr — Apache CGI Shell Injection - (MITRE T1059), 4 attempts, Period: 2026-10-10 21:59:28 to 2026-10-10 21:59:28
|
Web App Attack Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:45167 dst:23
|
Port Scan | |
| Anonymous |
|
Bad Web Bot Web App Attack | |
| 🇵🇾 armandosaucedo.me |
Threat Intelligence via ARMTI, Web Attack: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh
|
Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
|
Exploited Host Web App Attack | |
| Anonymous |
"POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1"
|
Hacking Web App Attack | |
| 🇩🇪 DyhnenTv |
CrowdSec webserver: crowdsecurity/http-cve-2021-41773
|
Web App Attack Bad Web Bot | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-10-10 17:54:29 | LAST=2026-10-10 17:54:29. Last seen 2026-10-10 17:54:29.
|
Port Scan | |
| 🇦🇺 2000cn.com.au |
This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773
|
Web App Attack Hacking | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP
|
SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown