JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.24.212.16

216.24.212.16 was found in our database!

This IP was reported 322 times. Confidence of Abuse is 78%: ?

78%

ISP	Rockion LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	rockionllc.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.24.212.16

Whois 216.24.212.16

IP Abuse Reports for 216.24.212.16:

This IP address has been reported a total of 322 times from 127 distinct sources. 216.24.212.16 was first reported on June 22nd 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 EGP Abuse Dept	2026-06-21 03:28:00 (3 hours ago)	forum signup bot	Web Spam Blog Spam Web App Attack
Anonymous	2026-06-17 06:47:38 (3 days ago)		Web Spam Bad Web Bot
🇩🇪 LRob.fr	2026-06-08 15:15:16 (1 week ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-08 00:54:42 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 216.24.212.16 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.24.212.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 20:54:35.445575 2026] [security2:error] [pid 1863:tid 1863] [client 216.24.212.16:22457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "explorediablo.com"] [uri "/wp-content/wp-config.php"] [unique_id "aiYSy2ksFzDpHSQNrZZD_gAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-06 17:17:33 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 ghostwarriors	2026-06-06 14:20:12 (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇷🇺 sms.ru	2026-06-06 11:08:11 (2 weeks ago)	/wp-admin/css/colors/blue/file.php	Web App Attack
🇺🇸 SodaAudit.app	2026-06-05 23:58:32 (2 weeks ago)	[sodaaudit.app] Web app attack. Timestamp: 2026-06-05T23:39:46.000Z. 131 probe events, 131 distinct ... show more [sodaaudit.app] Web app attack. Timestamp: 2026-06-05T23:39:46.000Z. 131 probe events, 131 distinct path(s). Paths (payload): /wp-content/upgrade-temp-backup/about.php, /wp-content/plugins/classic-editor/wp-login.php, /wp-content/uploads/system_core.php, /wp-content/plugins/upspy/up.php, /wp-admin/css/bolt.php show less	Web App Attack
🇫🇷 Octopuce	2026-06-05 22:19:09 (2 weeks ago)	Aggressive web search of vulnerable pages: /wp-content/uploads/file.php /wp-content/plugins/view-mor ... show more Aggressive web search of vulnerable pages: /wp-content/uploads/file.php /wp-content/plugins/view-more/ioxi.php /wp-includes/customize/dedi1.php ... show less	Web App Attack
🇫🇷 masterguru	2026-06-05 00:58:46 (2 weeks ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-195)	Hacking
🇺🇸 nyt	2026-06-03 18:28:40 (2 weeks ago)	Non-standard WP File, Accessing non-existent admin image file.	Web App Attack
🇺🇸 chrisj	2026-06-03 04:21:55 (2 weeks ago)	[Wed Jun 03 04:21:53.684907 2026] [proxy_fcgi:error] [pid 164197:tid 164197] [client 216.24.212.16:2 ... show more [Wed Jun 03 04:21:53.684907 2026] [proxy_fcgi:error] [pid 164197:tid 164197] [client 216.24.212.16:27775] AH01071: Got error 'Primary script unknown', referer: http://ericengholm.com/system_core.php [Wed Jun 03 04:21:54.166035 2026] [proxy_fcgi:error] [pid 164197:tid 164197] [client 216.24.212.16:27775] AH01071: Got error 'Primary script unknown', referer: http://ericengholm.com/config.php [Wed Jun 03 04:21:54.753973 2026] [proxy_fcgi:error] [pid 164197:tid 164197] [client 216.24.212.16:27775] AH01071: Got error 'Primary script unknown', referer: http://ericengholm.com/database.php ... show less	Brute-Force
🇩🇪 pltcldvlpr	2026-06-02 19:31:02 (2 weeks ago)	CMS/framework probe: 216.24.212.16 - - [02/Jun/2026:21:31:01 +0200] "GET /wp-includes/speculative8.p ... show more CMS/framework probe: 216.24.212.16 - - [02/Jun/2026:21:31:01 +0200] "GET /wp-includes/speculative8.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" asn=62240 org="Clouvider Limited" country=US ... show less	Web App Attack
Anonymous	2026-06-02 15:23:28 (2 weeks ago)	216.24.212.16 - - [02/Jun/2026:17:23:27 +0200] "GET /wp-includes/sodium_compat/ HTTP/1.1" 402 805 "- ... show more 216.24.212.16 - - [02/Jun/2026:17:23:27 +0200] "GET /wp-includes/sodium_compat/ HTTP/1.1" 402 805 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
🇧🇾 lns.bz	2026-06-02 10:33:34 (2 weeks ago)	Too many 404 requests [BY]	Web App Attack

Showing 1 to 15 of 322 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 2600:1900:4260:40e::12d

🇮🇳 223.184.247.100

🇨🇳 223.85.251.55

🇺🇸 172.93.106.153

🇺🇸 155.103.69.40

🇳🇱 195.178.110.162

🇧🇷 187.51.219.26

🇨🇳 175.6.247.41

🇺🇸 162.216.149.56

🇷🇴 141.98.83.240

🇵🇰 119.152.228.124

🇫🇷 85.217.140.45

🇧🇬 79.124.58.142

🇩🇪 69.5.169.225

🇳🇿 45.133.7.61

🇳🇱 31.14.32.4

🇺🇸 24.144.91.152

🇺🇸 20.168.0.135

🇺🇸 3.93.188.202

🇶🇦 2600:1900:4260:40e::120