JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.92.213.50

116.92.213.50 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 26%: ?

26%

ISP	HKBN Enterprise Solutions HK Limited
Usage Type	Fixed Line ISP
ASN	AS9381
Domain Name	hkbnes.com
Country	🇭🇰 Hong Kong
City	Tung Chung, Islands

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.92.213.50

Whois 116.92.213.50

IP Abuse Reports for 116.92.213.50:

This IP address has been reported a total of 9 times from 5 distinct sources. 116.92.213.50 was first reported on May 9th 2026, and the most recent report was 47 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-27 13:23:37 (47 minutes ago)	Web application attack detected.	Web App Attack
🇺🇸 1gz	2026-10-12 08:14:41 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /kryetitull/fitore-dhe-pensionim-khabib-me-postim-emocionues-ne-instagram/546142/kerko.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 SX Communications	2026-10-10 10:22:46 (2 weeks ago)	HTTP application-layer DoS / botnet traffic from 116.92.213.50: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 116.92.213.50: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 SX Communications	2026-09-26 18:24:57 (1 month ago)	HTTP application-layer DoS / botnet traffic from 116.92.213.50: repeated high-cost dynamic page and ... show more HTTP application-layer DoS / botnet traffic from 116.92.213.50: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇮🇩 hermawan	2026-09-20 01:38:48 (1 month ago)	[Sun Sep 20 08:38:41.833304 2026] [security2:error] [pid 242482:tid 140496668145344] [client 116.92. ... show more [Sun Sep 20 08:38:41.833304 2026] [security2:error] [pid 242482:tid 140496668145344] [client 116.92.213.50:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "601"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:referer: https://www.bmkg.go.id/ request_line = GET /index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prediksi-iklim/prediksi-dasarian/deterministik-curah-hujan-provinsi-jawa-timur"] [unique_id "aq85IctjwcSfrKLdklG35AAAAs0"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[242541] [G3mEMeAsNws] [aq85IctjwcSfrKLdklG35AAAAs0] keep_alive=[0] [2026-09-20 08:38:41.833308] [R:aq85IctjwcSfrKLdklG35AAAAs0] UA:'Mo ... show less	Email Spam Hacking
Anonymous	2026-09-18 04:20:57 (1 month ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2026-09-12 02:24:38 (1 month ago)	Web attack	Bad Web Bot Web App Attack
🇮🇩 hermawan	2026-05-28 00:46:11 (4 months ago)	[Thu May 28 07:46:11.532511 2026] [security2:error] [pid 241996:tid 139852559062720] [client 116.92. ... show more [Thu May 28 07:46:11.532511 2026] [security2:error] [pid 241996:tid 139852559062720] [client 116.92.213.50:55755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "aheQU2HXOyt8N93E_LuWWQAAQwA"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[241997] [xiH5DZacnP8] [aheQU2HXOyt8N93E_LuWWQAAQwA] keep_alive=[1] [2026-05-28 07:46:11.532517] [R:aheQU2HXOyt8N93E_LuWWQAAQwA] UA:'Mozilla/5.0 (Linux; Android 11; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id:443' ... show less	Email Spam Hacking
🇮🇩 hermawan	2026-05-09 21:20:41 (5 months ago)	[Sun May 10 04:13:16.219171 2026] [security2:error] [pid 52616:tid 139643654756032] [client 116.92.2 ... show more [Sun May 10 04:13:16.219171 2026] [security2:error] [pid 52616:tid 139643654756032] [client 116.92.213.50:58521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.google.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "623"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.google.go.id found within REQUEST_HEADERS:Referer: https://www.google.go.id/ request_line = GET /TableFilter/system-v173.css HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/TableFilter/system-v173.css"] [unique_id "af-jbGjjQoWaqnByTwBdbAABGAQ"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[52649] [Ottc++gOwW0] [af-jbGjjQoWaqnByTwBdbAABGAQ] keep_alive=[1] [2026-05-10 04:13:16.219175] [R:af-jbGjjQoWaqnByTwBdbAABGAQ] UA:'Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099 ... show less	Email Spam Hacking

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 190.89.55.250

🇺🇸 188.213.202.106

🇺🇸 174.76.33.8

🇮🇳 167.71.231.57

🇺🇸 162.216.149.6

🇰🇷 101.36.114.4

🇳🇱 95.179.176.175

🇺🇸 66.132.195.72

🇨🇳 47.109.179.249

🇳🇱 45.148.10.121

🇺🇸 45.41.86.226

🇺🇸 34.71.225.118

🇳🇱 200.138.46.213

🇵🇪 190.105.240.38

🇸🇾 188.132.249.157

🇺🇸 129.121.142.157

🇮🇹 79.3.96.178

🇺🇸 66.132.224.227

🇵🇷 24.171.218.204

🇨🇳 223.100.224.75