JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.234.215.92

216.234.215.92 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 41%: ?

41%

ISP	SpaceX Services, Inc.
Usage Type	Fixed Line ISP
ASN	AS14593
Hostname(s)	customer.jhngzaf1.isp.starlink.com
Domain Name	spacex.com
Country	🇿🇼 Zimbabwe
City	Harare, Harare

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.234.215.92

Whois 216.234.215.92

IP Abuse Reports for 216.234.215.92:

This IP address has been reported a total of 20 times from 17 distinct sources. 216.234.215.92 was first reported on April 24th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-16 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2026-06-16 06:19:35 (3 weeks ago)	tcp/1433 (3 or more attempts)	Port Scan
🇺🇸 MPL	2026-06-16 05:43:46 (3 weeks ago)	tcp/1433 (2 or more attempts)	Port Scan
🇺🇸 sumnone	2026-06-15 22:20:33 (3 weeks ago)	Port probing on unauthorized port 1433	Port Scan Hacking Exploited Host
🇺🇸 Axel	2026-06-15 07:57:00 (3 weeks ago)	Blocked by UFW on MVI [1433/tcp] \| SPT: 35649 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on MVI [1433/tcp] \| SPT: 35649 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-06-14 20:18:11 (3 weeks ago)	[rede-arem1] 06/14/2026-17:18:11.541842, 216.234.215.92, Protocol: 6, ET SCAN Suspicious inbound to ... show more [rede-arem1] 06/14/2026-17:18:11.541842, 216.234.215.92, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
🇨🇦 Tanados	2026-06-14 12:41:25 (3 weeks ago)	Blocked by UFW [1433/tcp] Source port: 5530 TTL: 235 Packet length: 40 TOS: 0x00 This report was ge ... show more Blocked by UFW [1433/tcp] Source port: 5530 TTL: 235 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-14 05:35:06 (3 weeks ago)	Blocked by UFW (TCP on 1433) Source port: 54742 TTL: 233 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 54742 TTL: 233 Packet length: 40 TOS: 0x08 This report (for 216.234.215.92) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-06-14 04:12:23 (3 weeks ago)	2026-06-14T07:12:23.052502+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-14T07:12:23.052502+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=216.234.215.92 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=34752 PROTO=TCP SPT=54742 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 iamxorum	2026-06-13 12:56:16 (4 weeks ago)	2026-06-13T12:56:15.982347+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-13T12:56:15.982347+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=216.234.215.92 DST=46.62.222.43 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=11573 PROTO=TCP SPT=54742 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 lechat	2026-06-13 00:12:34 (4 weeks ago)	2026-06-13T00:12:34.006647+0000 inbound port scan detected by Suricata. src=216.234.215.92:15312 dst ... show more 2026-06-13T00:12:34.006647+0000 inbound port scan detected by Suricata. src=216.234.215.92:15312 dst=51.255.207.147:1433 proto=TCP. signature="ET SCAN Suspicious inbound to MSSQL port 1433" category="Potentially Bad Traffic" sid=2010935 reason=scan_signature. show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-12 22:45:00 (4 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇮 inlink.ltd	2026-05-28 10:13:50 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇮🇩 Burayot	2026-05-28 09:25:40 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.234.215.92 (ZW/Zimbabwe/custome ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.234.215.92 (ZW/Zimbabwe/customer.jhngzaf1.isp.starlink.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 09:24:35 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 216.234.215.92 (customer.jhngzaf1.isp.starlink. ... show more (mod_security) mod_security (id:225170) triggered by 216.234.215.92 (customer.jhngzaf1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 05:24:31.135062 2026] [security2:error] [pid 12605:tid 12605] [client 216.234.215.92:50801] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|marv.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marv.us"] [uri "/wp-json/wp/v2/users"] [unique_id "ahgJz_DVb_UZWCS_F6bFCAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.237

🇬🇧 154.16.44.153

🇬🇧 37.10.113.214

🇮🇳 35.207.202.141

🇨🇳 106.80.180.96

🇨🇦 85.217.149.13

🇦🇺 2400:8907::2000:acff:fe81:46de

🇬🇧 154.16.44.185

🇺🇸 147.185.132.163

🇨🇳 110.249.201.56

🇰🇷 59.0.28.184

🇫🇷 46.16.202.73

🇳🇱 45.198.224.127

🇲🇽 187.137.4.133

🇳🇱 185.224.128.16

🇻🇳 171.231.197.205

🇺🇸 152.232.100.159

🇨🇳 120.48.99.236

🇳🇱 45.153.34.137

🇨🇳 222.223.177.118