JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.24.219.39

216.24.219.39 was found in our database!

This IP was reported 135 times. Confidence of Abuse is 23%: ?

23%

ISP	Rockion LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	rockionllc.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.24.219.39

Whois 216.24.219.39

IP Abuse Reports for 216.24.219.39:

This IP address has been reported a total of 135 times from 65 distinct sources. 216.24.219.39 was first reported on January 13th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 YF	2026-06-27 07:00:38 (1 week ago)	WordPress author enumeration	Web App Attack
🇮🇹 VHosting	2026-06-27 05:05:07 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-06-27 03:26:55 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇧🇪 Saec	2026-06-11 00:00:16 (4 weeks ago)	Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)	Port Scan Web App Attack
🇯🇵 demonsword	2026-04-28 19:47:07 (2 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.expressapisv2.net:443 show less	Open Proxy Port Scan
🇮🇩 BPS-StatisticsIndonesia	2026-04-27 01:22:49 (2 months ago)	WP Login Scan Activities: "2026-04-27T08:22:49.642+07:00" "/wp-login.php" "216.24.219.39" "Mozilla/5 ... show more WP Login Scan Activities: "2026-04-27T08:22:49.642+07:00" "/wp-login.php" "216.24.219.39" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" show less	Web App Attack
🇧🇪 voormedia	2026-04-27 00:17:13 (2 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇧🇪 voormedia	2026-04-22 13:55:03 (2 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇫🇷 Octopuce	2026-03-15 20:29:56 (3 months ago)	Aggressive web search of vulnerable pages: /themes/zMousse/ /wp-includes/ID3/ /wp-content/x/ /wp-con ... show more Aggressive web search of vulnerable pages: /themes/zMousse/ /wp-includes/ID3/ /wp-content/x/ /wp-content/plugins/ /wp-admin/js/widgets/ /cgi-bi ... show less	Web App Attack
🇺🇸 threatintelligence_bvc	2026-03-14 15:26:23 (3 months ago)		Brute-Force
Anonymous	2026-03-06 17:23:52 (4 months ago)	Authentication failure	Brute-Force
🇺🇸 TPI-Abuse	2026-02-25 12:23:09 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 216.24.219.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 216.24.219.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 07:23:02.275832 2026] [security2:error] [pid 2205:tid 2205] [client 216.24.219.39:56241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|flanagan.works\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "flanagan.works"] [uri "/wp-login.php"] [unique_id "aZ7ppum4nArXWE_8ak_k8gAAAAw"], referer: https://flanagan.works/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-02-25 02:50:50 (4 months ago)	(wp_login_try) srv103 WP Login Attempt 216.24.219.39 (US/United States/-): 10 in the last 3600 secs; ... show more (wp_login_try) srv103 WP Login Attempt 216.24.219.39 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-25 02:04:43 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 216.24.219.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 216.24.219.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 21:04:38.815615 2026] [security2:error] [pid 32006:tid 32006] [client 216.24.219.39:32533] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dogarttoday.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dogarttoday.com"] [uri "/wp-login.php"] [unique_id "aZ5Yth6uVRmZiTJJT1VYqgAAAAA"], referer: https://dogarttoday.com/wp-login.php show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-02-06 20:46:26 (5 months ago)	Accessed trap at '/wp-login.php'	Web App Attack

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 213.108.3.171

🇰🇷 211.197.62.36

🇬🇧 194.32.120.71

🇦🇷 186.148.224.183

🇪🇸 165.220.188.52

🇫🇮 147.185.133.113

🇺🇸 147.185.132.205

🇹🇷 95.70.166.232

🇫🇷 91.231.89.235

🇺🇸 91.230.168.213

🇨🇳 60.174.35.18

🇫🇷 54.38.190.246

🇬🇧 35.203.210.186

🇬🇧 2a06:4880:c000::e4

🇺🇸 207.90.244.18

🇳🇱 195.178.110.228

🇺🇸 162.216.149.190

🇫🇮 147.185.133.59

🇫🇮 147.185.133.13

🇮🇳 139.59.45.149