216.81.248.2

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
207 reports
161 reporters ยท latest 1 week ago
ISP
Massed Compute
Usage Type
Data Center/Web Hosting/Transit
ASN
AS11320
Hostname(s)
bratton.brattonsteel.com
Domain Name
massedcompute.com
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
Des Moines, Iowa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
207 from 161 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 45 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 43 ๐Ÿ‡ซ๐Ÿ‡ท France 18
Most common categories Web App Attack 165 Hacking 61 Bad Web Bot 56 Brute-Force 42 Port Scan 26
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡จ๐Ÿ‡ญ TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
Anonymous
fail2ban jail apache-secrets-probe: 216.81.248.2 - - [04/Oct/2026:04:10:18 -0700] "GET /.git/config HTTP/1.1" 403 4426 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
Web App Attack
๐Ÿ‡จ๐Ÿ‡ญ TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
๐Ÿ‡ฉ๐Ÿ‡ช BiancaNL
Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)
Hacking Web App Attack
Anonymous
fail2ban jail apache-secrets-probe: 216.81.248.2 - - [04/Oct/2026:04:10:18 -0700] "GET /.git/config HTTP/1.1" 403 4426 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
Web App Attack
๐Ÿ‡จ๐Ÿ‡ญ TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
๐Ÿ‡ฉ๐Ÿ‡ช BiancaNL
Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)
Hacking Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช BiancaNL
Fail2Ban: jail=code-runner-scanner-probe on <fqdn> (port=<port>)
Hacking Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ LSPCCU
Port Scan Hacking Brute-Force Web App Attack SSH IoT Targeted
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
Anonymous
fail2ban jail apache-secrets-probe: 216.81.248.2 - - [04/Oct/2026:04:10:18 -0700] "GET /.git/config HTTP/1.1" 403 4426 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
Web App Attack
๐Ÿ‡ญ๐Ÿ‡ท bubausluge
Blocked by https://aegis.hr โ€” Web Scanner - (MITRE T1595.001), 9 attempts, Period: 2026-10-05 00:41:11 to 2026-10-05 00:41:11
Web App Attack Bad Web Bot
๐Ÿ‡ช๐Ÿ‡ธ Gem
Unauthorized web scan.
Web App Attack
Anonymous
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
Web App Attack Bad Web Bot
๐Ÿ‡จ๐Ÿ‡ฑ Fernando Soto
WAF propio vps1 (CL): sensx1 score 8 en 1h. sondeo rutas sensibles.
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฎ๐Ÿ‡น 217.28.70.15
๐Ÿ‡ธ๐Ÿ‡ฌ 134.122.152.21
๐Ÿ‡ฏ๐Ÿ‡ต 35.194.107.83
๐Ÿ‡ฐ๐Ÿ‡ท 222.108.100.117
๐Ÿ‡ญ๐Ÿ‡ฐ 192.151.255.194
๐Ÿ‡บ๐Ÿ‡ธ 104.168.101.23
๐Ÿ‡บ๐Ÿ‡ธ 66.132.159.46
๐Ÿ‡บ๐Ÿ‡ธ 64.62.197.169
๐Ÿ‡บ๐Ÿ‡ธ 34.69.225.145
๐Ÿ‡บ๐Ÿ‡ธ 31.105.105.210
๐Ÿ‡ญ๐Ÿ‡ฐ 8.217.68.84
๐Ÿ‡บ๐Ÿ‡ธ 3.213.226.45
๐Ÿ‡ฎ๐Ÿ‡น 2.38.113.182
๐Ÿ‡น๐Ÿ‡ณ 196.229.198.137
๐Ÿ‡ณ๐Ÿ‡ฑ 185.242.226.9
๐Ÿ‡จ๐Ÿ‡ฆ 70.24.62.129
๐Ÿ‡บ๐Ÿ‡ธ 66.132.224.27
๐Ÿ‡บ๐Ÿ‡ธ 45.136.25.77
๐Ÿ‡ธ๐Ÿ‡ฌ 43.160.219.206
๐Ÿ‡ท๐Ÿ‡ด 2.57.121.112