JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.234.213.82

216.234.213.82 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 34%: ?

34%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.jhngzaf1.isp.starlink.com
Domain Name	spacex.com
Country	🇿🇲 Zambia
City	Lusaka, Lusaka Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.234.213.82

Whois 216.234.213.82

IP Abuse Reports for 216.234.213.82:

This IP address has been reported a total of 21 times from 15 distinct sources. 216.234.213.82 was first reported on July 29th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-09 18:18:40 (2 weeks ago)	Attac	Brute-Force
🇩🇪 konseptit	2026-06-09 16:15:03 (2 weeks ago)	(wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/customer.jhngzaf1.isp.starlink.com ... show more (wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/customer.jhngzaf1.isp.starlink.com) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-09 14:13:37 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 216.234.213.82 (customer.jhngzaf1.isp.starlink. ... show more (mod_security) mod_security (id:240335) triggered by 216.234.213.82 (customer.jhngzaf1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:13:30.446749 2026] [security2:error] [pid 22459:tid 22459] [client 216.234.213.82:34566] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 216.234.213.82 (+1 hits since last alert)\|lenorasflowers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lenorasflowers.com"] [uri "/xmlrpc.php"] [unique_id "aigfikfB4YtAXsjpXGzcFgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 11:53:29 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 216.234.213.82 (customer.jhngzaf1.isp.starlink. ... show more (mod_security) mod_security (id:240335) triggered by 216.234.213.82 (customer.jhngzaf1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:53:24.053884 2026] [security2:error] [pid 12432:tid 12432] [client 216.234.213.82:57085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 216.234.213.82 (+1 hits since last alert)\|inquisitivequincie.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "inquisitivequincie.com"] [uri "/xmlrpc.php"] [unique_id "aif-tL7uwRZaLa8IR0tf1gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-09 07:21:03 (2 weeks ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 integrantservices.com	2026-06-05 13:29:00 (3 weeks ago)	(wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/customer.jhngzaf1.isp.starlink.com ... show more (wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/customer.jhngzaf1.isp.starlink.com) show less	Brute-Force
Anonymous	2026-06-05 10:08:26 (3 weeks ago)	Attac	Brute-Force
🇺🇸 TPI-Abuse	2026-06-05 09:14:03 (3 weeks ago)	(mod_security) mod_security (id:240335) triggered by 216.234.213.82 (customer.jhngzaf1.isp.starlink. ... show more (mod_security) mod_security (id:240335) triggered by 216.234.213.82 (customer.jhngzaf1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 05:13:58.459119 2026] [security2:error] [pid 16378:tid 16479] [client 216.234.213.82:11626] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 216.234.213.82 (+1 hits since last alert)\|vancekelly.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vancekelly.com"] [uri "/xmlrpc.php"] [unique_id "aiKTVm52MPmTQuwGvweGoQAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-05 07:26:13 (3 weeks ago)	[FriJun0509:26:11.1766062026][security2:error][pid405589:tid405696][client216.234.213.82:0]ModSecuri ... show more [FriJun0509:26:11.1766062026][security2:error][pid405589:tid405696][client216.234.213.82:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"glass-container.com\"][uri\"/xmlrpc.php\"][unique_id\"aiJ6E3ZtYzMkJdaUyPFc4QAAAQE\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 grassau.com	2026-06-05 02:43:10 (3 weeks ago)	(wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/Lusaka Province/Lusaka/customer.jh ... show more (wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/Lusaka Province/Lusaka/customer.jhngzaf1.isp.starlink.com) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-03-12 19:19:10 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 216.234.213.82 (customer.jhngzaf1.isp.starlink. ... show more (mod_security) mod_security (id:225170) triggered by 216.234.213.82 (customer.jhngzaf1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 15:19:02.299624 2026] [security2:error] [pid 147519:tid 147519] [client 216.234.213.82:8560] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|drbolen.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drbolen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abMRpm7QOkFDW2zZvUr6NwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-03-12 06:25:55 (3 months ago)	(wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/Lusaka Province/Lusaka/customer.jh ... show more (wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/Lusaka Province/Lusaka/customer.jhngzaf1.isp.starlink.com) show less	Brute-Force
🇺🇸 RH5	2026-03-11 20:21:55 (3 months ago)	Restricted URL probing (/xmlrpc.php) (UTC 2026-03-11 20:21)	Web App Attack
🇳🇱 maxxsense	2026-03-11 14:15:11 (3 months ago)	(wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/customer.jhngzaf1.isp.starlink.com ... show more (wordpress) Failed wordpress login from 216.234.213.82 (ZM/Zambia/customer.jhngzaf1.isp.starlink.com) show less	Brute-Force
🇳🇿 Tripwire	2026-03-11 00:36:00 (3 months ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 45.131.195.13

🇷🇸 185.26.173.224

🇷🇴 92.118.39.71

🇺🇸 85.208.96.210

🇺🇸 20.245.71.147

🇨🇳 106.13.120.65

🇨🇳 221.210.2.146

🇰🇷 221.161.235.168

🇩🇪 213.209.159.227

🇸🇳 213.154.80.51

🇧🇪 198.235.24.170

🇪🇨 181.224.174.28

🇲🇽 177.229.197.38

🇨🇳 120.194.220.230

🇰🇷 118.43.196.193

🇬🇧 86.165.219.75

🇸🇬 43.172.194.251

🇸🇬 43.156.212.86

🇧🇬 5.188.206.34

🇰🇷 210.183.21.53