JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.24.212.29

216.24.212.29 was found in our database!

This IP was reported 340 times. Confidence of Abuse is 68%: ?

68%

ISP	Rockion LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	rockionllc.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.24.212.29

Whois 216.24.212.29

IP Abuse Reports for 216.24.212.29:

This IP address has been reported a total of 340 times from 135 distinct sources. 216.24.212.29 was first reported on June 21st 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-26 18:36:50 (1 week ago)	216.24.212.29 - - [27/Jun/2026:02:36:42 +0800] "GET /wp-admin/maint/joker.php HTTP/1.1" 404 196 "htt ... show more 216.24.212.29 - - [27/Jun/2026:02:36:42 +0800] "GET /wp-admin/maint/joker.php HTTP/1.1" 404 196 "http://turfkingasia.com/wp-admin/maint/joker.php" "Go-http-client/1.1" 216.24.212.29 - - [27/Jun/2026:02:36:43 +0800] "GET /wp-content/plugins/elementor/core/files/about.php HTTP/1.1" 404 196 "http://turfkingasia.com/wp-content/plugins/elementor/core/files/about.php" "Go-http-client/1.1" 216.24.212.29 - - [27/Jun/2026:02:36:44 +0800] "GET /wp-content/plugins/elementor/includes/interfaces/about.php HTTP/1.1" 404 196 "http://turfkingasia.com/wp-content/plugins/elementor/includes/interfaces/about.php" "Go-http-client/1.1" 216.24.212.29 - - [27/Jun/2026:02:36:44 +0800] "GET /wp-content/plugins/waspthemes-yellow-pencil/images/list/about.php HTTP/1.1" 404 196 "http://turfkingasia.com/wp-content/plugins/waspthemes-yellow-pencil/images/list/about.php" "Go-http-client/1.1" 216.24.212.29 - - [27/Jun/2026:02:36:45 +0800] "GET /wp-content/plugins/woocommerce/includes/import/about.php HTTP/1.1" 404 196 ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 06:52:11 (1 week ago)	(mod_security) mod_security (id:234930) triggered by 216.24.212.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:234930) triggered by 216.24.212.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 02:52:05.541667 2026] [security2:error] [pid 15658:tid 15658] [client 216.24.212.29:40929] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|niseigroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "niseigroup.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "aj4hlX_Un90nXhaBuz7xHgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-06-25 21:36:29 (1 week ago)	216.24.212.29 - - [25/Jun/2026:17:36:24 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 404 21728 ... show more 216.24.212.29 - - [25/Jun/2026:17:36:24 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 404 21728 "http://sapphirebeachbarbados.com/wp-content/themes/admin.php" "Go-http-client/2.0" 216.24.212.29 - - [25/Jun/2026:17:36:25 -0400] "GET /wp-includes/blocks/column HTTP/1.1" 404 21489 "https://www.sapphirebeachbarbados.com/wp-includes/blocks/column/" "Go-http-client/2.0" 216.24.212.29 - - [25/Jun/2026:17:36:26 -0400] "GET /ahax.php HTTP/1.1" 404 21409 "http://sapphirebeachbarbados.com/ahax.php" "Go-http-client/2.0" 216.24.212.29 - - [25/Jun/2026:17:36:27 -0400] "GET /wp-includes/blocks/post-terms HTTP/1.1" 404 21497 "https://www.sapphirebeachbarbados.com/wp-includes/blocks/post-terms/" "Go-http-client/2.0" 216.24.212.29 - - [25/Jun/2026:17:36:29 -0400] "GET /wp-includes/sitemaps HTTP/1.1" 404 21455 "https://www.sapphirebeachbarbados.com/wp-includes/sitemaps/" "Go-http-client/2.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-25 20:48:30 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇱🇻 garmtech.com	2026-06-22 07:10:14 (1 week ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-10.216.24.212.29.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-10.216.24.212.29.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-06-21 10:55:35 (1 week ago)		Web Spam Bad Web Bot
🇩🇪 LRob	2026-06-08 15:15:22 (3 weeks ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-06 21:53:45 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 216.24.212.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 216.24.212.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 17:53:42.239358 2026] [security2:error] [pid 25636:tid 25655] [client 216.24.212.29:54139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "executiveconsultingpr.com"] [uri "/wp-content/wp-config.php"] [unique_id "aiSW5hkxMPQLU49EzMErkwAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-06-06 14:18:23 (3 weeks ago)	216.24.212.29 - - [06/Jun/2026:17:18:22 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 404 707 "- ... show more 216.24.212.29 - - [06/Jun/2026:17:18:22 +0300] "GET /wp-admin/user/wp-login.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 216.24.212.29 - - [06/Jun/2026:17:18:23 +0300] "GET /wp-includes/item.php HTTP/1.1" 404 707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" ... show less	Web App Attack
🇩🇪 ghostwarriors	2026-06-06 12:20:27 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇷🇺 sms.ru	2026-06-06 11:07:52 (3 weeks ago)	/wp-admin/wp-login.php	Web App Attack
🇳🇱 Site.eu	2026-06-06 10:29:56 (3 weeks ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-06 03:29:42 (3 weeks ago)	(mod_security) mod_security (id:240000) triggered by 216.24.212.29 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 216.24.212.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 23:29:38.137744 2026] [security2:error] [pid 15936:tid 15936] [client 216.24.212.29:51303] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|gsvip.com.ec\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "gsvip.com.ec"] [uri "/images/stories/themes.php"] [unique_id "aiOUIt1jSdzEJCactGd7LwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-06-05 22:17:56 (4 weeks ago)	Aggressive web search of vulnerable pages: /item.php /function/function.php /wp-includes/SimplePie/i ... show more Aggressive web search of vulnerable pages: /item.php /function/function.php /wp-includes/SimplePie/index.php /wp-admin/images/admin.php /wp-inc ... show less	Web App Attack
🇫🇷 masterguru	2026-06-05 02:46:30 (4 weeks ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (4002-135)	Hacking Web App Attack

Showing 1 to 15 of 340 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 194.180.236.144

🇺🇸 195.184.76.30

🇫🇷 194.163.173.88

🇺🇦 194.62.136.207

🇨🇦 192.71.227.219

🇩🇪 185.242.3.226

🇬🇧 142.93.43.189

🇿🇦 102.217.243.81

🇱🇻 92.118.170.31

🇲🇾 47.250.128.143

🇺🇸 45.56.68.133

🇩🇪 44.152.86.122

🇫🇮 31.134.8.234

🇪🇸 196.196.150.100

🇺🇸 151.245.253.87

🇰🇷 121.1.120.182

🇨🇳 118.145.247.242

🇨🇳 117.39.63.46

🇮🇳 103.103.133.93

🇸🇬 103.13.206.152