JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.40.75.16

216.40.75.16 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 17%: ?

17%

ISP	PureKernel LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213954
Domain Name	purekernel.net
Country	🇷🇺 Russian Federation
City	Saint Petersburg, St.-Petersburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.40.75.16

Whois 216.40.75.16

IP Abuse Reports for 216.40.75.16:

This IP address has been reported a total of 8 times from 6 distinct sources. 216.40.75.16 was first reported on December 21st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-06-05 15:51:03 (1 week ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇩🇪 HandyTreff.de	2026-05-18 00:53:05 (3 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.77 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -51.77 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4273.2 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-16 23:48:29 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 216.40.75.16 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 216.40.75.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 19:48:22.960768 2026] [security2:error] [pid 17314:tid 17314] [client 216.40.75.16:26219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lazer/Stargo Black/Thumbs.db"] [unique_id "agkCRp50kKLiMeRmWyX0dwAAAAo"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lazer/Stargo%20Black/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-19 05:21:04 (1 month ago)		Bad Web Bot
🇫🇷 tilellit.pro	2026-02-05 06:16:29 (4 months ago)	Fail2Ban banned 216.40.75.16 for security violations in jail wp-armour. Log: 2026/02/05 06:16:28 [er ... show more Fail2Ban banned 216.40.75.16 for security violations in jail wp-armour. Log: 2026/02/05 06:16:28 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 216.40.75.16 \| Target: wplogin" , client: 216.40.75.16, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇩🇪 london2038.com	2026-01-22 20:39:47 (4 months ago)	Detected by WP fail2ban 2026-01-22T21:39:47.106009+01:00 wordpress: Authentication attempt from 216. ... show more Detected by WP fail2ban 2026-01-22T21:39:47.106009+01:00 wordpress: Authentication attempt from 216.40.75.16 show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-24 02:31:15 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 216.40.75.16 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 216.40.75.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 21:31:10.491175 2025] [security2:error] [pid 21487:tid 21487] [client 216.40.75.16:59485] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|versahealthcare.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "versahealthcare.com"] [uri "/"] [unique_id "aUtQbghXdUH8L6fq3rwxZAAAAAI"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-12-21 07:04:33 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.40.75.16 (HK/Hong Kong/-): 1 in ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 216.40.75.16 (HK/Hong Kong/-): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 79.124.62.230

🇺🇸 172.71.189.102

🇨🇱 168.90.221.58

🇫🇮 147.185.133.160

🇺🇸 107.150.105.153

🇷🇴 80.94.92.164

🇺🇸 64.62.156.172

🇸🇬 47.79.207.40

🇸🇬 47.79.200.121

🇩🇪 45.135.141.11

🇳🇱 20.123.146.93

🇶🇦 2600:1900:4260:40e::16c

🇺🇸 216.25.89.87

🇰🇷 211.228.218.47

🇳🇱 193.25.217.247

🇧🇷 187.72.144.217

🇧🇷 186.225.225.68

🇳🇱 176.65.148.197

🇵🇱 87.251.64.156

🇺🇸 66.132.195.24