JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 90.52.92.220

90.52.92.220 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 30%: ?

30%

ISP	Orange S.A.
Usage Type	Fixed Line ISP
ASN	AS3215
Hostname(s)	lfbn-lyo-1-1657-220.w90-52.abo.wanadoo.fr
Domain Name	orange.com
Country	🇫🇷 France
City	Pranles, Auvergne-Rhone-Alpes

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 90.52.92.220

Whois 90.52.92.220

IP Abuse Reports for 90.52.92.220:

This IP address has been reported a total of 12 times from 7 distinct sources. 90.52.92.220 was first reported on July 31st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 neckaralb-admin.de	2026-10-20 18:50:54 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇷🇺 AbuseIPDB informer	2026-10-13 08:05:55 (1 week ago)	nfdump top talker: 90.52.92.220 \| first seen 2026-10-13 08:05:55.456 \| duration 00:00:00.090 \| flows ... show more nfdump top talker: 90.52.92.220 \| first seen 2026-10-13 08:05:55.456 \| duration 00:00:00.090 \| flows=1 \| packets=35805 \| bytes=26.1 M \| pps=395 \| bps=2.3 M \| bpp=728 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-12 17:56:50 (1 week ago)	nfdump top talker: 90.52.92.220 \| first seen 2026-10-12 20:56:50.560 \| duration 00:00:00.171 \| flows ... show more nfdump top talker: 90.52.92.220 \| first seen 2026-10-12 20:56:50.560 \| duration 00:00:00.171 \| flows=3 \| packets=89001 \| bytes=65.1 M \| pps=519 \| bps=3.0 M \| bpp=730 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-12 16:53:26 (1 week ago)	nfdump top talker: 90.52.92.220 \| first seen 2026-10-12 19:53:26.912 \| duration 00:00:00.234 \| flows ... show more nfdump top talker: 90.52.92.220 \| first seen 2026-10-12 19:53:26.912 \| duration 00:00:00.234 \| flows=5 \| packets=131967 \| bytes=96.5 M \| pps=562 \| bps=3.3 M \| bpp=730 \| proto=udp show less	DDoS Attack Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-08 10:47:21 (2 weeks ago)	nfdump top talker: 90.52.92.220 \| first seen 2026-10-08 13:47:21.856 \| duration 00:00:00.078 \| flows ... show more nfdump top talker: 90.52.92.220 \| first seen 2026-10-08 13:47:21.856 \| duration 00:00:00.078 \| flows=1 \| packets=26598 \| bytes=19.9 M \| pps=340 \| bps=2.0 M \| bpp=747 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇷🇺 AbuseIPDB informer	2026-10-03 17:09:06 (2 weeks ago)	nfdump top talker: 90.52.92.220 \| first seen 2026-10-03 20:09:06.176 \| duration 00:00:00.064 \| flows ... show more nfdump top talker: 90.52.92.220 \| first seen 2026-10-03 20:09:06.176 \| duration 00:00:00.064 \| flows=1 \| packets=23529 \| bytes=23.0 M \| pps=364 \| bps=2.9 M \| bpp=976 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇨🇿 lp	2026-09-28 10:52:22 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 90.52.92.220 2026-09-28T12:14:33+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 90.52.92.220 2026-09-28T12:14:33+02:00 vpn Access-Reject 'xsykf00' station: 90.52.92.220 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-25 18:52:29 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 90.52.92.220 (lfbn-lyo-1-1657-220.w90-52.abo.wa ... show more (mod_security) mod_security (id:225170) triggered by 90.52.92.220 (lfbn-lyo-1-1657-220.w90-52.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 14:52:21.569824 2026] [security2:error] [pid 3727:tid 3727] [client 90.52.92.220:52566] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|appalachianfolkmagician.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "appalachianfolkmagician.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arbC5Zh2RWetLXmR4qiP7gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 19:38:43 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 17:54:37 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 nationaleventpros.com	2026-09-19 20:49:29 (1 month ago)	WordPress login attempt	Brute-Force
🇺🇸 kosada.com	2026-07-31 17:33:54 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.191.36

🇮🇳 164.100.212.64

🇸🇪 78.68.69.14

🇺🇸 64.62.197.62

🇮🇳 50.6.45.178

🇨🇳 42.63.158.14

🇺🇸 209.205.148.131

🇺🇦 176.122.105.215

🇰🇷 162.158.139.18

🇫🇮 147.185.133.198

🇩🇪 139.59.136.184

🇻🇳 125.253.123.34

🇫🇷 91.196.152.124

🇺🇸 52.23.180.120

🇺🇸 20.80.87.91

🇺🇸 129.121.142.84

🇫🇷 91.231.89.67

🇧🇬 79.124.58.150

🇺🇸 66.132.195.17

🇧🇷 45.5.252.250