JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.142.216.17

92.142.216.17 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 32%: ?

32%

ISP	Orange S.A.
Usage Type	Fixed Line ISP
ASN	AS3215
Hostname(s)	lfbn-may-1-89-17.w92-142.abo.wanadoo.fr
Domain Name	orange.com
Country	🇾🇹 Mayotte
City	Mamoudzou, Mamoudzou

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.142.216.17

Whois 92.142.216.17

IP Abuse Reports for 92.142.216.17:

This IP address has been reported a total of 15 times from 10 distinct sources. 92.142.216.17 was first reported on August 11th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 raph	2026-08-25 19:40:22 (3 weeks ago)	[SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%2 ... show more [SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%20and%20\|%20OR%20\|%20or%20).* HTTP/1.1$ show less	SQL Injection
🇩🇪 raph	2026-08-21 10:45:22 (3 weeks ago)	[SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%2 ... show more [SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%20and%20\|%20OR%20\|%20or%20).* HTTP/1.1$ show less	SQL Injection
🇺🇸 maxasp.net	2026-08-20 04:55:25 (4 weeks ago)	Inc-HTTP-Safe Reject, collection = QueryString; Attack Var: tripid; Attack Data: 1' AND 1=1 UNION SE ... show more Inc-HTTP-Safe Reject, collection = QueryString; Attack Var: tripid; Attack Data: 1' AND 1=1 UNION SELECT NULL-- - show less	SQL Injection
🇫🇷 masterguru	2026-08-20 00:33:21 (4 weeks ago)	SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint '1 ... show more SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint '1B1c' (942100-133) show less	SQL Injection
🇳🇱 Site.eu	2026-08-19 22:26:51 (4 weeks ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 raph	2026-08-19 07:36:28 (4 weeks ago)	[SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%2 ... show more [SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%20and%20\|%20OR%20\|%20or%20).* HTTP/1.1$ show less	SQL Injection
🇬🇧 Aetherweb Ark	2026-08-18 02:02:06 (4 weeks ago)	(mod_security) mod_security (id:949110) triggered by 92.142.216.17 (YT/Mayotte/lfbn-may-1-89-17.w92- ... show more (mod_security) mod_security (id:949110) triggered by 92.142.216.17 (YT/Mayotte/lfbn-may-1-89-17.w92-142.abo.wanadoo.fr): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-17 21:28:45 (4 weeks ago)	(mod_security) mod_security (id:220150) triggered by 92.142.216.17 (lfbn-may-1-89-17.w92-142.abo.wan ... show more (mod_security) mod_security (id:220150) triggered by 92.142.216.17 (lfbn-may-1-89-17.w92-142.abo.wanadoo.fr): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 17:28:37.816164 2026] [security2:error] [pid 4469:tid 4469] [client 92.142.216.17:42474] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.{0,399}\\\\\\\\/)?select)" at ARGS:cPath. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|www.carbonless.net\|F\|2"] [data "')//and//('rwdmxd'='rwdmxd'//union//all//select//'ygdzdjcgnhatzyhhyersxuajotvraxxb'--/*/h5z0z3"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.carbonless.net"] [uri "/carbcart/index.php"] [unique_id "aoN9BRg88intiCWaYz6AZgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-08-17 21:15:09 (4 weeks ago)	[SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\| ... show more [SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\|union%20\|SELECT%20\|select%20).* HTTP/1.1$ show less	SQL Injection
🇪🇸 offensivesentinel	2026-08-13 23:10:24 (1 month ago)	ModSecurity rule violation on iesmonterroso.org	Web App Attack
🇫🇷 masterguru	2026-08-13 22:01:22 (1 month ago)	SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint 'U ... show more SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint 'UEsc' (942100-133) show less	SQL Injection
🇨🇦 polycoda	2026-08-13 06:59:11 (1 month ago)	AutoBlock: 💉 SQL Injection Attempt (Non Decay-Based)	Hacking Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-08-11 23:53:57 (1 month ago)	cloudlinux2 fail2ban: 2026-08-12 01:50:36,256 fail2ban.filter [1708]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-12 01:50:36,256 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 172.68.245.193 - 2026-08-12 01:50:35cloudlinux2 fail2ban: 2026-08-12 01:50:36,269 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 172.68.245.193 - 2026-08-12 01:50:35cloudlinux2 fail2ban: 2026-08-12 01:51:05,435 fail2ban.actions [1708]: NOTICE [plesk-modsecurity] Unban 176.28.195.170cloudlinux2 fail2ban: 2026-08-12 01:51:17,434 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 92.142.216.17 - 2026-08-12 01:51:17cloudlinux2 fail2ban: 2026-08-12 01:51:23,734 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 128.79.28.94 - 2026-08-12 01:51:23cloudlinux2 fail2ban: 2026-08-12 01:51:32,866 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 77.143.29.75 - 2026-08-12 01:51:32cloudlinux2 fail2ban: 2026-08-12 01:51:43,195 fail2ban.filter [1708]: INFO [plesk-modsecurity] Found 45.95.233.182 - 2026-08-12 01:51:43cloudlinux2 fail show less	Brute-Force
Anonymous	2026-08-11 23:30:14 (1 month ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Web App Attack Hacking SQL Injection
🇩🇪 raph	2026-08-11 21:29:09 (1 month ago)	[SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\| ... show more [SQL UNION SELECT] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(UNION%20\|union%20\|SELECT%20\|select%20).* HTTP/1.1$ show less	SQL Injection

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.253.31.30

🇧🇩 202.40.190.212

🇺🇸 195.140.179.62

🇺🇦 194.44.140.16

🇺🇸 159.65.221.232

🇰🇷 119.207.25.220

🇵🇰 118.107.139.205

🇵🇰 103.211.195.42

🇫🇷 91.231.89.25

🇮🇷 85.133.193.72

🇳🇱 85.11.167.7

🇰🇷 49.173.65.19

🇳🇱 45.138.12.24

🇯🇵 34.97.80.26

🇧🇪 198.235.24.178

🇰🇷 121.142.87.218

🇮🇩 103.139.126.5

🇫🇷 85.217.140.49

🇳🇱 45.148.10.152

🇩🇪 8.211.27.88