JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.117.89.3

92.117.89.3 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	1&1 Telecom GmbH
Usage Type	Fixed Line ISP
ASN	AS8881
Hostname(s)	i5C755903.versanet.de
Domain Name	mein-1und1-domain.de
Country	🇩🇪 Germany
City	Koln, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.117.89.3

Whois 92.117.89.3

IP Abuse Reports for 92.117.89.3:

This IP address has been reported a total of 22 times from 22 distinct sources. 92.117.89.3 was first reported on August 31st 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-08-31 22:45:00 (15 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 TPI-Abuse	2026-08-31 21:11:55 (16 hours ago)	(mod_security) mod_security (id:218420) triggered by 92.117.89.3 (i5C755903.versanet.de): 1 in the l ... show more (mod_security) mod_security (id:218420) triggered by 92.117.89.3 (i5C755903.versanet.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 17:11:47.262250 2026] [security2:error] [pid 20307:tid 20307] [client 92.117.89.3:53414] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.152:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.152"] [uri "/hello.world"] [unique_id "apXuE09DA4dlrsu5IgYpbQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NetVexor	2026-08-31 20:06:16 (17 hours ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇷🇺 GoXLd	2026-08-31 18:49:41 (18 hours ago)	2026-08-31T20:49:41.535483+02:00 gXdNODE2 sshd-session[58885]: Invalid user admin from 92.117.89.3 p ... show more 2026-08-31T20:49:41.535483+02:00 gXdNODE2 sshd-session[58885]: Invalid user admin from 92.117.89.3 port 37546 ... show less	Brute-Force SSH
🇨🇦 polycoda	2026-08-31 18:33:50 (19 hours ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Web App Attack
🇺🇸 factor1	2026-08-31 17:46:13 (20 hours ago)	CrowdSec at sherman Reports Abuse	Web App Attack
Anonymous	2026-08-31 15:42:48 (22 hours ago)	2026-08-31T15:42:45.857888+00:00 Germany1 sshd-session[3906049]: pam_unix(sshd:auth): authentication ... show more 2026-08-31T15:42:45.857888+00:00 Germany1 sshd-session[3906049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.117.89.3 2026-08-31T15:42:47.354493+00:00 Germany1 sshd-session[3906049]: Failed password for invalid user admin from 92.117.89.3 port 60042 ssh2 ... show less	Brute-Force SSH
🇩🇪 AetherFox	2026-08-31 15:30:27 (22 hours ago)	AetherFox VoidGuard detected: [Mon Aug 31 15:30:21.314843 2026] [authz_core:error] [pid 382525:tid 3 ... show more AetherFox VoidGuard detected: [Mon Aug 31 15:30:21.314843 2026] [authz_core:error] [pid 382525:tid 382570] [client 92.117.89.3:58164] AH01630: client denied by server configuration: /var/www/html/hello.world [Mon Aug 31 15:30:21.314912 2026] [authz_core:error] [pid 382525:tid 382570] [client 92.117.89.3:58164] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html [Mon Aug 31 15:30:24.639627 2026] [authz_core:error] [pid 382525:tid 382566] [client 92.117.89.3:58164] AH01630: client denied by server configuration: /var/www/html/ [Mon Aug 31 15:30:24.640063 2026] [authz_core:error] [pid 382525:tid 382566] [client 92.117.89.3:58164] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html [Mon Aug 31 15:30:26.874290 2026] [authz_core:error] [pid 382525:tid 382559] [client 92.117.89.3:58164] AH01630: client denied by server configuration: /var/www/html/index.php ... show less	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-08-31 14:50:54 (22 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 92.117.89.3 (DE/Germany/i5C755903.ve ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 92.117.89.3 (DE/Germany/i5C755903.versanet.de): 2 in the last 3600 secs show less	Web App Attack
🇧🇩 sakibmas	2026-08-31 14:45:45 (23 hours ago)	2026-08-31T20:45:42.982522+06:00 passbolt sshd[411469]: pam_unix(sshd:auth): authentication failure; ... show more 2026-08-31T20:45:42.982522+06:00 passbolt sshd[411469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.117.89.3 2026-08-31T20:45:45.224746+06:00 passbolt sshd[411469]: Failed password for invalid user admin from 92.117.89.3 port 41610 ssh2 ... show less	Brute-Force SSH
🇯🇵 Kinsei Engineering Inc.	2026-08-31 13:33:26 (1 day ago)	UFW:High-frequency access to non-released ports used by software with known vulnerabilities.	Port Scan
🇳🇱 Mangelot Hosting	2026-08-31 10:42:29 (1 day ago)	(sshd) Failed SSH login from 92.117.89.3 (DE/Germany/i5C755903.versanet.de): 5 in the last 3600 secs ... show more (sshd) Failed SSH login from 92.117.89.3 (DE/Germany/i5C755903.versanet.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 31 12:40:19 sshd[1118655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.117.89.3 user=[USERNAME] Aug 31 12:40:21 sshd[1118655]: Failed password for [USERNAME] from 92.117.89.3 port 47130 ssh2 Aug 31 12:41:22 sshd[1122246]: Invalid user [USERNAME] from 92.117.89.3 port 54122 Aug 31 12:41:24 sshd[1122246]: Failed password for invalid user [USERNAME] from 92.117.89.3 port 54122 ssh2 Aug 31 12:42:26 sshd[1125763]: pam_unix(sshd:auth): authentication show less	SSH
🇩🇪 netup.at	2026-08-31 09:35:07 (1 day ago)	IP 92.117.89.3 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇺🇸 MPL	2026-08-31 08:27:16 (1 day ago)	tcp/443 (4 or more attempts)	Port Scan
🇩🇪 dpsbs	2026-08-31 07:16:34 (1 day ago)	multiple ips intrustions detected	Hacking

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 203.200.74.20

🇮🇳 117.254.93.97

🇺🇸 104.168.92.159

🇺🇸 65.49.20.111

🇺🇸 64.62.156.164

🇹🇷 212.85.224.70

🇪🇨 186.42.96.62

🇭🇰 165.154.23.187

🇮🇩 153.76.65.53

🇮🇩 114.122.85.4

🇰🇷 59.20.216.210

🇬🇪 213.131.33.2

🇻🇳 210.245.18.47

🇮🇳 182.95.106.102

🇷🇺 178.70.46.12

🇰🇷 121.188.250.148

🇷🇺 92.124.130.176

🇮🇩 69.5.20.205

🇰🇷 211.253.8.115

🇺🇸 184.105.139.117