JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.216.88.58

16.216.88.58 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 58%: ?

58%

ISP	ReflectionAI Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	reflectionbot-88-58.reflection.ai
Domain Name	reflection.ai
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.216.88.58

Whois 16.216.88.58

IP Abuse Reports for 16.216.88.58:

This IP address has been reported a total of 19 times from 13 distinct sources. 16.216.88.58 was first reported on September 17th 2026, and the most recent report was 37 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Mga Admin	2026-10-17 03:24:16 (37 minutes ago)	16.216.88.58 - - [17/Oct/2026:10:24:15 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs54645173 ... show more 16.216.88.58 - - [17/Oct/2026:10:24:15 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs546451732 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 mutebot.net	2026-10-17 00:10:53 (3 hours ago)	SRC=16.216.88.58, PROTO=TCP, SPT=53248, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=53248, DPT=8443 SR ... show more SRC=16.216.88.58, PROTO=TCP, SPT=53248, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=53248, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=53248, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=53248, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=53248, DPT=8443 show less	Port Scan
🇷🇺 Mga Admin	2026-10-15 22:11:08 (1 day ago)	16.216.88.58 - - [16/Oct/2026:05:11:07 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs14980919 ... show more 16.216.88.58 - - [16/Oct/2026:05:11:07 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs149809198 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇷🇺 Mga Admin	2026-10-14 22:02:50 (2 days ago)	16.216.88.58 - - [15/Oct/2026:05:02:49 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs15030683 ... show more 16.216.88.58 - - [15/Oct/2026:05:02:49 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs150306837 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇷🇺 Mga Admin	2026-10-13 20:36:43 (3 days ago)	16.216.88.58 - - [14/Oct/2026:03:36:41 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs59671840 ... show more 16.216.88.58 - - [14/Oct/2026:03:36:41 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs59671840 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇷🇺 Mga Admin	2026-10-12 17:43:06 (4 days ago)	16.216.88.58 - - [13/Oct/2026:00:43:05 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs6098209 ... show more 16.216.88.58 - - [13/Oct/2026:00:43:05 +0700] "GET /analysis/theta/ws?p=5e-8&r2=0.9&rs-id=rs6098209 HTTP/1.1" 400 34 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-10-11 09:08:53 (5 days ago)	Honeypot: http-public probing for vulnerable paths	Web App Attack
🇺🇸 kosada.com	2026-10-10 15:09:59 (6 days ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?amp%3 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?amp%3Bamp%3Bamp%3Bamp%3Bf%5B0%5D=digest_key_terms%3A327&amp%3Bamp%3Bamp%3Bamp%3Bfield_key_terms%5B337%5D=337&amp%3Bamp%3Bamp%3Bpage=8&amp%3Bamp%3Bf%5B0%5D=digest_key_terms%3A764&amp%3Bf%5B0%5D=digest_key_terms%3A797&f%5B0%5D=digest_key_terms%3A934&field_article_edition%5B504%5D=504 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 mutebot.net	2026-10-10 02:48:21 (1 week ago)	SRC=16.216.88.58, PROTO=TCP, SPT=57344, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=57344, DPT=8443 SR ... show more SRC=16.216.88.58, PROTO=TCP, SPT=57344, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=57344, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=57344, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=57344, DPT=8443 SRC=16.216.88.58, PROTO=TCP, SPT=57344, DPT=8443 show less	Port Scan
Anonymous	2026-10-09 19:38:27 (1 week ago)	Web application attack detected.	Web App Attack
🇫🇷 mrcrassi	2026-10-08 14:41:02 (1 week ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /blog/voce-conhece-a-garen-valores-e-visoes/ UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-08 03:29:56 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 16.216.88.58 (reflectionbot-88-58.reflection.ai ... show more (mod_security) mod_security (id:210730) triggered by 16.216.88.58 (reflectionbot-88-58.reflection.ai): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 23:29:51.318347 2026] [security2:error] [pid 26924:tid 26924] [client 16.216.88.58:57345] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nancyscafeandcatering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/sexoxtube.com"] [unique_id "ascOLyyrV7bp9r8VGocNvwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-10-07 21:22:38 (1 week ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoin ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /booru/artist/%E3%81%A9%E3%81%86%E3%81%A9%E3%81%86-%E6%A6%9B%E5%B0%8F%E8%B1%86%20(%E7%B6%A0%E8%89%B2%E8%B1%8C%E8%B1%86) \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 netclix.gr	2026-10-01 02:04:47 (2 weeks ago)	(bot_qv) Bot Scraping QuickView 16.216.88.58 (US/United States/reflectionbot-88-58.reflection.ai): 1 ... show more (bot_qv) Bot Scraping QuickView 16.216.88.58 (US/United States/reflectionbot-88-58.reflection.ai): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 16.216.88.58 - - [01/Oct/2026:05:04:43 +0300] "GET /index.php?dispatch=products.quick_view&n_items=13205%2C13122%2C13012%2C12928%2C12911%2C12748%2C12660%2C12658%2C11278%2C11279%2C11284%2C11285%2C11286%2C11287%2C11290%2C11291%2C11293%2C11296%2C11298%2C11309%2C11319%2C11320%2C11321%2C11324%2C11327%2C11655%2C11656%2C11658%2C12223%2C12233%2C12234%2C12236%2C12237%2C12239%2C12242%2C12245%2C12380&prev_url=index.php%3Fitems_per_page%3D128%26sort_by%3Dtimestamp%26sort_order%3Ddesc%26dispatch%3Dcategories.view%26category_id%3D100&product_id=11291 HTTP/2.0" 302 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36" show less	Port Scan
🇩🇪 FeG Deutschland	2026-09-19 09:51:03 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 118.196.142.135

🇨🇳 118.196.86.3

🇳🇱 91.92.42.140

🇳🇱 81.19.216.73

🇨🇳 60.217.65.254

🇻🇳 58.186.20.143

🇰🇷 20.196.193.222

🇨🇳 14.103.107.214

🇰🇷 222.110.147.58

🇬🇧 213.166.84.40

🇧🇪 198.235.24.224

🇧🇪 198.235.24.141

🇿🇼 197.221.251.234

🇷🇴 193.46.255.86

🇪🇨 186.68.83.104

🇰🇷 169.211.212.42

🇺🇸 147.185.132.101

🇺🇸 136.144.35.234

🇳🇱 109.160.32.170

🇩🇪 64.89.163.164