JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

16.216.88.238

Recent Activity

Abuse Confidence Score

77% Critical

21 reports

14 reporters · latest 16 hours ago

ISP: ReflectionAI Inc
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): reflectionbot-88-238.reflection.ai
Domain Name: reflection.ai
Country: 🇺🇸 United States of America
City: Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

21 from 14 distinct reporters

First reported

October 21st 2026

Most recent report

16 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 8 🇫🇷 France 3 🇷🇺 Russian Federation 3

Most common categories Web App Attack 12 Bad Web Bot 10 Hacking 3 DDoS Attack 2 Port Scan 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-11-08 00:44:59 UTC · (16 hours ago)	Web App Attack	Web App Attack
🇩🇪 filstal.org	2026-11-07 11:39:01 UTC · (1 day ago)	Persistent bad bot: repeated automated abuse detected	Bad Web Bot Web App Attack
🇵🇱 MatStef132	2026-11-07 02:13:55 UTC · (1 day ago)	MatShield L7: blocked on a protected site (sec-fetch-user-on-empty-dest)	DDoS Attack
🇫🇷 Sklurk	2026-11-07 00:43:58 UTC · (1 day ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-11-06 00:42:18 UTC · (2 days ago)	Web App Attack	Web App Attack
🇷🇺 Mga Admin	2026-11-04 21:01:10 UTC · (3 days ago)	16.216.88.238 - - [05/Nov/2026:04:01:09 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs138826564 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs138826564" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ... show more 16.216.88.238 - - [05/Nov/2026:04:01:09 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs138826564 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs138826564" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 Progetto1	2026-11-04 11:40:02 UTC · (4 days ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-11-03 18:25:23 UTC · (4 days ago)	Persistent web bot repeatedly crawling dynamic phpBB endpoints\; banned by Fail2Ban" ...	Bad Web Bot
🇷🇺 Mga Admin	2026-11-03 05:06:49 UTC · (5 days ago)	16.216.88.238 - - [03/Nov/2026:12:06:47 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs149533505 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs149533505" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ... show more 16.216.88.238 - - [03/Nov/2026:12:06:47 +0700] "GET /data/associations?p=5e-8&r2=0.9&rs-id=rs149533505 HTTP/1.1" 404 67 "https://phelige.com/associations?p=5e-8&r2=0.9&rs-id=rs149533505" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-11-02 04:50:26 UTC · (6 days ago)	Persistent web bot repeatedly crawling dynamic phpBB endpoints\; banned by Fail2Ban" ...	Bad Web Bot
🇺🇸 mutebot.net	2026-10-31 18:29:05 UTC · (1 week ago)	SRC=16.216.88.238, PROTO=TCP, SPT=28672, DPT=8443 SRC=16.216.88.238, PROTO=TCP, SPT=28672, DPT=8443 SRC=16.216.88.238, PROTO=TCP, SPT=28672, DPT=8443 SRC=16.216.88.238, PROTO=TCP, SPT=28672, DPT=8443 SRC=16.216.88.238, PROTO=TCP, SPT=28672, DPT=8443	Port Scan
🇩🇪 klaus_ph	2026-10-31 12:48:49 UTC · (1 week ago)	[Sat Oct 31 13:43:30.207145 2026] [ssl:info] [pid 242972] [client 16.216.88.238:28672] AH01964: Connection to child 24 established (server bga.vufind.net:443) ...	Hacking
🇦🇺 paulshipley.com.au	2026-10-31 05:31:51 UTC · (1 week ago)	valueaddedpromotions.com.au:443 16.216.88.238 - - [31/Oct/2026:16:31:49 +1100] "GET /wp-good.php HTTP/1.1" 404 164019 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 ... show more valueaddedpromotions.com.au:443 16.216.88.238 - - [31/Oct/2026:16:31:49 +1100] "GET /wp-good.php HTTP/1.1" 404 164019 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-30 09:25:38 UTC · (1 week ago)	(mod_security) mod_security (id:225080) triggered by 16.216.88.238 (reflectionbot-88-238.reflection.ai): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 05:25:31.808143 2026] [security2:error] [pid 515:tid 515] [ ... show more (mod_security) mod_security (id:225080) triggered by 16.216.88.238 (reflectionbot-88-238.reflection.ai): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 05:25:31.808143 2026] [security2:error] [pid 515:tid 515] [client 16.216.88.238:28673] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|daveware.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daveware.net"] [uri "/wp-includes/js/tinymce/plugins/"] [unique_id "auRii6k-QusOOd5IqbOlkwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-10-30 03:32:43 UTC · (1 week ago)	levellapromotions.com.au:443 16.216.88.238 - - [30/Oct/2026:14:32:40 +1100] "GET /admin/function.php HTTP/1.1" 404 136730 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0. ... show more levellapromotions.com.au:443 16.216.88.238 - - [30/Oct/2026:14:32:40 +1100] "GET /admin/function.php HTTP/1.1" 404 136730 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.104

🇳🇱 193.47.62.99

🇬🇧 172.236.28.161

🇫🇷 51.68.111.215

🇺🇸 50.6.5.14

🇩🇪 213.209.159.236

🇺🇸 136.107.247.126

🇨🇳 116.179.37.164

🇺🇸 66.132.224.18

🇺🇸 35.169.206.177

🇺🇸 206.189.169.145

🇺🇸 192.253.209.69

🇬🇧 185.7.214.240

🇰🇷 125.246.95.152

🇷🇺 62.140.235.10

🇺🇸 40.124.186.184

🇪🇸 217.160.39.106

🇩🇪 213.209.159.226

🇧🇷 179.48.18.42

🇩🇪 167.94.146.57