JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

216.81.248.59

Activity Trending Down

Abuse Confidence Score

1% Caution

118 reports

90 reporters · latest 3 weeks ago

ISP: Massed Compute
Usage Type: Data Center/Web Hosting/Transit
ASN: AS11320
Hostname(s): ip59.kcy.lh-nap.net
Domain Name: massedcompute.com
Country: 🇺🇸 United States of America
City: Des Moines, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

118 from 90 distinct reporters

First reported

January 19th 2025

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇵🇰 Pakistan 1

Most common categories Brute-Force 1

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇰 sbk97 (https://sayor.net)	2026-10-04 07:42:44 (3 weeks ago)	SAYOR honeypot: observed attack /.git/config	Brute-Force
🇫🇷 mrcrassi	2025-12-29 23:08:47 (9 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php.bak UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 This report was generated by: https://github.com/se ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php.bak UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 tjs	2025-12-29 22:50:00 (9 months ago)	web attack	Hacking Web App Attack
🇦🇹 Starburst SysOp Team	2025-12-29 21:49:20 (9 months ago)	Invalid HTTP Request Line. Match of "rx (?i)^(?:get / (920100-ams6-1)	Hacking
🇩🇪 updown.io	2025-12-29 20:32:53 (9 months ago)	{"level":"info","ts":1767040367.5891774,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"216.81.248.59","remote_port":"44880","client_ip":"216.81.248.59","proto":"HTTP/1.1","method":"GET","host":"uptime.thinklumo.com"," ... show more {"level":"info","ts":1767040367.5891774,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"216.81.248.59","remote_port":"44880","client_ip":"216.81.248.59","proto":"HTTP/1.1","method":"GET","host":"uptime.thinklumo.com","uri":"/js/vendor.js","headers":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8"],"Accept-Language":["en-US,en;q=0.5"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Cache-Control":["no-cache"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"]},"tls":{"resumed":true,"version":772,"cipher_suite":4865,"proto":"","server_name":"uptime.thinklumo.com"}},"bytes_read":0,"user_id":"","duration":0.00014028,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1767040367.595032,"logger":"http.log.access.log1","msg":"handled request","request":{"r ... show less	DDoS Attack Web App Attack
🇧🇪 cmbplf	2025-12-29 20:02:19 (9 months ago)	2.011 requests from abuseipdb.com blacklisted IP (1yr4mos1w)	Brute-Force Bad Web Bot
🇺🇦 URAN Publishing Service	2025-12-29 19:54:56 (9 months ago)	216.81.248.59 - - [29/Dec/2025:21:54:51 +0200] "GET /wp-content/themes/theme/js/main.js HTTP/1.1" 404 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.81.248.59 - - [29/Dec/ ... show more 216.81.248.59 - - [29/Dec/2025:21:54:51 +0200] "GET /wp-content/themes/theme/js/main.js HTTP/1.1" 404 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 216.81.248.59 - - [29/Dec/2025:21:54:51 +0200] "GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1" 404 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2025-12-29 19:42:00 (9 months ago)	Excessive crawling/scraping. Vulnerable file probing.	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2025-12-29 19:02:13 (9 months ago)	Site scraper	Web App Attack
🇪🇸 masterguru	2025-12-29 18:58:05 (9 months ago)	Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (44020-123)	Hacking
Anonymous	2025-12-29 17:36:47 (9 months ago)	wordpress-trap	Web App Attack
🇩🇪 LRob	2025-12-29 17:17:51 (9 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 LRob	2025-12-29 15:03:54 (9 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
Anonymous	2025-12-29 14:33:05 (9 months ago)	216.81.248.59 (US/United States/Iowa/Des Moines/ip59.kcy.lh-nap.net/[redacted]), more than 120 Apache 404 hits	Hacking
🇧🇪 boxed-it	2025-12-15 11:43:31 (10 months ago)	GET /.git/config (Tarpitted for 1d2h32m39s, wasted 5.47MB)	Web App Attack

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇹 188.219.104.210

🇳🇱 200.138.46.219

🇺🇸 195.184.76.214

🇩🇪 194.88.98.109

🇧🇷 186.224.97.40

🇨🇳 175.178.184.121

🇺🇸 172.214.209.153

🇺🇸 162.216.150.36

🇺🇸 129.121.138.193

🇰🇷 124.153.189.92

🇰🇷 121.133.167.123

🇨🇳 106.117.115.62

🇻🇪 92.118.182.30

🇧🇬 78.128.114.66

🇺🇸 52.248.43.163

🇧🇷 34.151.221.176

🇨🇳 27.223.98.117

🇺🇸 23.185.200.28

🇻🇳 14.191.184.34

🇹🇼 198.235.24.37