AbuseIPDB » 216.24.210.71

216.24.210.71 was found in our database!

This IP was reported 111 times. Confidence of Abuse is 77%: ?

77%

ISP	Rockion LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	rockionllc.com
Country	United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 216.24.210.71

Whois 216.24.210.71

IP Abuse Reports for 216.24.210.71:

This IP address has been reported a total of 111 times from 52 distinct sources. 216.24.210.71 was first reported on August 29th 2022, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2025-07-16 01:04:26 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 21:04:20.109522 2025] [security2:error] [pid 23549:tid 23549] [client 216.24.210.71:30311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brownlegacy.org"] [uri "/.env"] [unique_id "aHb6lCE5bv6mhHTyDW9NIAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-15 21:34:44 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 17:34:40.026614 2025] [security2:error] [pid 12216:tid 12216] [client 216.24.210.71:16365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hwy251.com"] [uri "/.env"] [unique_id "aHbJcFCTEMBTwMeRVR7l0wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-15 16:50:52 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 12:50:48.527928 2025] [security2:error] [pid 31061:tid 31061] [client 216.24.210.71:4881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jadonbooth.com"] [uri "/.env"] [unique_id "aHaG6KfTEdk_SbN4NPQw7QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-15 05:03:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 01:03:13.213466 2025] [security2:error] [pid 11800:tid 11800] [client 216.24.210.71:29337] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "axiomcommercial.com"] [uri "/.env"] [unique_id "aHXhEXP6Ebr78JjrABYgFwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-15 00:15:07 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 20:15:02.236239 2025] [security2:error] [pid 8080:tid 8080] [client 216.24.210.71:43653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ashincorporated.com"] [uri "/.env"] [unique_id "aHWdhi_1QGSi8tBM7pVh_AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-14 21:03:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 17:03:34.935417 2025] [security2:error] [pid 3189:tid 3189] [client 216.24.210.71:49131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "essentialee.com"] [uri "/.env"] [unique_id "aHVwplTLCbsi5dPSn_3NdwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-14 10:57:42 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 06:57:34.930120 2025] [security2:error] [pid 31223:tid 31223] [client 216.24.210.71:14513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genesis-group.net"] [uri "/.env"] [unique_id "aHTinr9_G2JGBQlU7aG_lQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-14 07:55:02 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 03:54:58.554363 2025] [security2:error] [pid 20105:tid 20105] [client 216.24.210.71:11127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beachcitytshirts.com"] [uri "/.env"] [unique_id "aHS30tF0z55L1xLLHH2YWQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
oh.mg	2025-07-14 07:49:39 (2 days ago)	[Mon Jul 14 09:49:32.873396 2025] [security2:error] [pid 2972920:tid 2972925] [client 216.24.210.71: ... show more[Mon Jul 14 09:49:32.873396 2025] [security2:error] [pid 2972920:tid 2972925] [client 216.24.210.71:38289] [client 216.24.210.71] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.name"] [uri "/.env"] [unique_id "aHS2jF-hnaQxVhkHLeQOzQAAAQM"] [Mon Jul 14 09:49:39.483407 2025] [security2:error] [pid 2972920:tid 2972940] [client 216.24.210.71:7965] [client 216.24.210.71] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomal ... show less	Bad Web Bot Web App Attack
TPI-Abuse	2025-07-14 05:56:48 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 14 01:56:42.275521 2025] [security2:error] [pid 14796:tid 14796] [client 216.24.210.71:15189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quintessence.com"] [uri "/.env"] [unique_id "aHScGs8UZNfbq_xBhbKqgwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-13 14:44:34 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 10:44:29.445604 2025] [security2:error] [pid 23541:tid 23541] [client 216.24.210.71:29747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talkingmess.com"] [uri "/.env"] [unique_id "aHPGTUT2RNczd92tv21mygAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-13 08:35:26 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 04:35:18.526118 2025] [security2:error] [pid 18490:tid 18490] [client 216.24.210.71:47417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autobee.biz"] [uri "/.env"] [unique_id "aHNvxj5mr0VSPNbXQnLTRwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-07-13 07:20:39 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 216.24.210.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 03:20:33.882371 2025] [security2:error] [pid 11009:tid 11009] [client 216.24.210.71:8807] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jiveturkeyband.com"] [uri "/.env"] [unique_id "aHNeQbBnD0ElIsoPwtK6jAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
URAN Publishing Service	2025-07-11 18:25:00 (4 days ago)	216.24.210.71 - - [11/Jul/2025:21:24:59 +0300] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" ... show more216.24.210.71 - - [11/Jul/2025:21:24:59 +0300] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 404 275 "-" "Go-http-client/1.1" ... show less	Web App Attack
backslash	2025-07-11 16:10:10 (4 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 111 reports

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs:

184.105.247.248

65.49.1.167

83.143.148.155

111.21.76.90

8.219.103.48

45.33.76.86

186.91.21.47

131.196.147.81

36.226.140.138

113.47.3.7

73.227.169.188

193.163.125.226

162.142.125.227

190.109.52.164

150.131.70.164

118.99.81.35

184.105.139.111

118.107.1.158

45.33.33.17

134.209.59.175