JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

216.9.224.48

Recent Activity

Abuse confidence score ?

1% Caution

39 reports

19 reporters · latest 6 days ago

ISP	White Label Services, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS44382
Hostname(s)	29792-25903.dchost.com
Domain Name	whitelabelservices.us
Country	🇺🇸 United States of America
City	New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 216.9.224.48

Export CSV

This IP address has been reported a total of 39 times from 19 distinct sources. 216.9.224.48 was first reported on February 24th 2024, and the most recent report was 6 days ago. In the last 60 days, the only reporter location was: United States of America with 3 reports. The only category in these recent reports was: Exploited Host 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jaybird26	2026-09-26 10:44:06 (6 days ago)	Malware payload host (rev-base64-loader). observed via URLhaus ref #3918217. first seen 8d ago. samp ... show more Malware payload host (rev-base64-loader). observed via URLhaus ref #3918217. first seen 8d ago. sample URL: http://216.9.224.48/100/cFghrke.txt. Source: URLhaus (https://urlhaus.abuse.ch/). Automated detection — please verify independently before acting; if anything here is wrong, tell us at [email protected]. show less	Exploited Host
🇺🇸 jaybird26	2026-09-11 10:47:47 (3 weeks ago)	Malware payload host (rev-base64-loader). observed via URLhaus ref #3914931. first seen 0d ago. samp ... show more Malware payload host (rev-base64-loader). observed via URLhaus ref #3914931. first seen 0d ago. sample URL: http://216.9.224.48/90/krjcbec.txt. Source: URLhaus (https://urlhaus.abuse.ch/). Automated detection — please verify independently before acting; if anything here is wrong, tell us at [email protected]. show less	Exploited Host
🇺🇸 jaybird26	2026-08-08 12:17:57 (1 month ago)	Malware payload host (rev-base64-loader). observed via URLhaus ref #3897370. first seen 2d ago. samp ... show more Malware payload host (rev-base64-loader). observed via URLhaus ref #3897370. first seen 2d ago. sample URL: http://216.9.224.48/xz/genera-raw-fileupload.txt. Source: URLhaus (https://urlhaus.abuse.ch/). show less	Exploited Host
🇺🇸 jaybird26	2026-07-25 10:34:41 (2 months ago)	Malware payload host (rev-base64-loader). observed via URLhaus ref #3887190. first seen 8d ago. samp ... show more Malware payload host (rev-base64-loader). observed via URLhaus ref #3887190. first seen 8d ago. sample URL: http://216.9.224.48/9/didgkjm.txt. Source: URLhaus (https://urlhaus.abuse.ch/). show less	Exploited Host
🇺🇸 jaybird26	2026-07-10 10:41:05 (2 months ago)	Malware payload host (Unknown). observed via URLhaus ref #3884321. first seen 0d ago. sample URL: ht ... show more Malware payload host (Unknown). observed via URLhaus ref #3884321. first seen 0d ago. sample URL: http://216.9.224.48/7/drmSjnm.txt. Source: URLhaus (https://urlhaus.abuse.ch/). show less	Exploited Host
🇺🇸 jaybird26	2026-06-24 12:16:57 (3 months ago)	Malware payload host (AgentTesla). observed via URLhaus ref #3874456. first seen 1d ago. sample URL: ... show more Malware payload host (AgentTesla). observed via URLhaus ref #3874456. first seen 1d ago. sample URL: http://216.9.224.48/3/IpmhdFm.txt. Source: URLhaus (https://urlhaus.abuse.ch/). show less	Exploited Host
🇧🇷 ICS Labs	2026-04-07 10:05:24 (5 months ago)	ICS Labs identified malicious URL in email communication from IP 216.9.224.48	Phishing Email Spam Spoofing
🇧🇷 diego	2024-09-06 12:07:47 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇧🇷 diego	2024-09-06 00:54:49 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇧🇷 diego	2024-09-03 21:17:57 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds	DDoS Attack
🇹🇷 rtbh.com.tr	2024-09-01 16:55:04 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-08-29 20:55:09 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-08-28 20:55:11 (2 years ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 ATV	2024-08-28 03:09:56 (2 years ago)	Unsolicited connection attempts to port 11211	Port Scan
🇹🇷 rtbh.com.tr	2024-08-28 00:55:12 (2 years ago)	list.rtbh.com.tr report: tcp/11211	Brute-Force

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.69.151.10

🇨🇳 124.174.7.42

🇨🇳 113.137.40.250

🇰🇷 112.216.129.27

🇵🇰 39.55.138.236

🇧🇷 187.62.232.146

🇵🇰 185.228.92.250

🇰🇭 175.100.53.216

🇳🇱 109.160.32.178

🇳🇱 109.160.32.142

🇪🇸 104.22.7.62

🇺🇸 103.203.57.13

🇫🇷 85.217.140.5

🇸🇪 83.233.149.38

🇺🇸 47.85.163.235

🇭🇰 20.239.141.177

🇺🇸 12.202.15.69

🇨🇳 220.179.81.109

🇺🇸 216.25.89.124

🇸🇬 193.37.32.41