This IP address has been reported a total of
9
times from
8 distinct
sources.
16.216.88.42 was first reported on
October 20th 2026 , and the most recent report was
1 hour ago United States of America
with 5
reports;
Germany
with 2
reports;
Netherlands
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Bad Web Bot
5
times;
Brute-Force
3
times;
Port Scan
1
time;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-24 07:11:58
(1 hour ago)
16.216.88.42 www.rolistore.com - [22/Oct/2026:21:21:09 -0600] "GET /control-xbox-advanced-midas?tag= ...
show more
16.216.88.42 www.rolistore.com - [22/Oct/2026:21:21:09 -0600] "GET /control-xbox-advanced-midas?tag=noise%20cancelling HTTP/1.1" 200 742164 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"\n16.216.88.42 www.rolistore.com - [23/Oct/2026:17:27:22 -0600] "GET /playera-precious-ring?page=6&tag=mejor%20precio HTTP/1.1" 200 744730 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"\n16.216.88.42 www.rolistore.com - [24/Oct/2026:01:11:57 -0600] "GET /index.php?amp;page=4&tag=mando&route=product/search HTTP/1.1" 200 606591 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-23 09:31:52
(22 hours ago)
(mod_security) mod_security (id:210730) triggered by 16.216.88.42 (reflectionbot-88-42.reflection.ai ...
show more
(mod_security) mod_security (id:210730) triggered by 16.216.88.42 (reflectionbot-88-42.reflection.ai): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 05:31:45.067214 2026] [security2:error] [pid 5045:tid 5045] [client 16.216.88.42:28673] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gamepart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "atspganaoKmMhMpCc8CtOAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-23 02:20:14
(1 day ago)
Vulnerability scanning | method: GET | path: /media/bulletin/FF% | ua: -
Port Scan
Web App Attack
2026-10-21 21:39:26
(2 days ago)
Persistent web bot repeatedly crawling dynamic phpBB endpoints\; banned by Fail2Ban"
...
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-21 15:04:40
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 16.216.88.42 (reflectionbot-88-42.reflection.ai ...
show more
(mod_security) mod_security (id:210730) triggered by 16.216.88.42 (reflectionbot-88-42.reflection.ai): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 11:04:33.913096 2026] [security2:error] [pid 13198:tid 13198] [client 16.216.88.42:16385] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||comics.flyingdodostudio.com|F|2"] [data ".tumblr.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comics.flyingdodostudio.com"] [uri "/herbert/inkyphalangies.tumblr.com"] [unique_id "atjUgSJUfR_iXamv-TjnPwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-21 13:03:48
(2 days ago)
15 attempts against mh-modsecurity-ban on mars
Brute-Force
Web App Attack
🇷🇺
Mga Admin
2026-10-20 21:27:21
(3 days ago)
16.216.88.42 - - [21/Oct/2026:04:27:19 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs2107526 ...
show more
16.216.88.42 - - [21/Oct/2026:04:27:19 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs2107526 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
kosada.com
2026-10-20 19:03:00
(3 days ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?amp%3 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?amp%3Bamp%3Bf%5B0%5D=digest_key_terms%3A316&%3Bamp%3Bfield_key_terms%5B337%5D=337&%3Bf%5B0%5D=digest_key_terms%3A336&f%5B0%5D=digest_key_terms%3A507&f%5B1%5D=digest_key_terms%3A515&field_article_edition%5B504%5D=504 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇩🇪
hero2026
2026-10-20 18:56:57
(3 days ago)
Blocked by Fail2ban
Web App Attack
Showing 1 to
9
of 9 reports
