JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 88.216.68.244

88.216.68.244 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 56%: ?

56%

ISP	UAB Nacionalinis Telekomunikaciju Tinklas
Usage Type	Data Center/Web Hosting/Transit
ASN	AS204770
Hostname(s)	ip-88-216-68-244.007.ptr.cherryservers.net
Domain Name	ntt.lt
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 88.216.68.244

Whois 88.216.68.244

IP Abuse Reports for 88.216.68.244:

This IP address has been reported a total of 31 times from 19 distinct sources. 88.216.68.244 was first reported on March 9th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-05 19:21:44 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 88.216.68.244 (ip-88-216-68-244.007.ptr.cherrys ... show more (mod_security) mod_security (id:210730) triggered by 88.216.68.244 (ip-88-216-68-244.007.ptr.cherryservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 15:21:36.492472 2026] [security2:error] [pid 8068:tid 8068] [client 88.216.68.244:4762] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|tecnoconce.cl\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tecnoconce.cl"] [uri "/p-php.ini"] [unique_id "aiMhwLQgVodUs6FmLNC_FwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 17:27:57 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 88.216.68.244 (ip-88-216-68-244.007.ptr.cherrys ... show more (mod_security) mod_security (id:210730) triggered by 88.216.68.244 (ip-88-216-68-244.007.ptr.cherryservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 13:27:50.322538 2026] [security2:error] [pid 20755:tid 20755] [client 88.216.68.244:22318] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|anbruswebdesign.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "anbruswebdesign.com"] [uri "/[email protected]"] [unique_id "aiMHFj1UwdJ0A90H3TZymAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-05 13:18:00 (4 days ago)	Exceeded the maximum global requests per minute for crawlers or humans.	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 06:43:35 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 88.216.68.244 (ip-88-216-68-244.007.ptr.cherrys ... show more (mod_security) mod_security (id:210730) triggered by 88.216.68.244 (ip-88-216-68-244.007.ptr.cherryservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 02:43:27.743823 2026] [security2:error] [pid 896:tid 896] [client 88.216.68.244:6320] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|john-bell-associates.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "john-bell-associates.com"] [uri "/reddit.com"] [unique_id "aiJwDzn7ew3QuvZvI6iw-AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-05 04:49:30 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-05 01:08:37 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 88.216.68.244 (ip-88-216-68-244.007.ptr.cherrys ... show more (mod_security) mod_security (id:210730) triggered by 88.216.68.244 (ip-88-216-68-244.007.ptr.cherryservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 21:08:30.180732 2026] [security2:error] [pid 15342:tid 15342] [client 88.216.68.244:40302] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mindchill.net\|F\|2"] [data ".exe.config"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mindchill.net"] [uri "/mindchill.net/otherstuff/Application Files/RockeTXT_1_0_0_23/RockeTXT.exe.config"] [unique_id "aiIhjh9DtmkwoTdAsBtBcwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 SSH-Admin	2026-06-04 19:00:05 (5 days ago)	Probing for Exploits on ns200	Exploited Host Web App Attack
🇨🇦 SSH-Admin	2026-06-04 18:39:02 (5 days ago)	Probing for Exploits on ns74	Exploited Host Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-04 18:13:08 (5 days ago)	categories: DDoS Attack	DDoS Attack
🇦🇺 screwlooseit.com.au	2026-06-04 14:03:21 (5 days ago)	Blocked by CSF 13 firewall - Rule: LT/Republic of Lithuania/ip-88-216-68-244.007.ptr.cherryservers.n ... show more Blocked by CSF 13 firewall - Rule: LT/Republic of Lithuania/ip-88-216-68-244.007.ptr.cherryservers.net show less	Web App Attack
🇩🇪 HandyTreff.de	2026-06-04 13:40:37 (5 days ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -81.881 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -81.881 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.12 show less	Web App Attack Bad Web Bot
🇨🇦 dispensight	2026-06-04 11:56:25 (5 days ago)	Automated scan (stale UA fingerprint): 1 GET request to help.dispensight.cloud. Paths: /. UA: Mozill ... show more Automated scan (stale UA fingerprint): 1 GET request to help.dispensight.cloud. Paths: /. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36. UAB Cherry Servers (Chicago, United States). show less	Bad Web Bot
🇮🇹 VHosting	2026-06-04 11:45:03 (5 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-04-01 21:06:27 (2 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Auto ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Automated scanning show less	Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-04-01 03:58:45 (2 months ago)	2026-04-01 05:58:45 (CET) ~ Blocked by abusescan risk assessment	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 31.37.243.3

🇺🇸 23.95.239.208

🇮🇳 2409:40e3:40ed:ef7f:f1ea:6511:6538:f3f4

🇸🇬 152.42.187.117

🇳🇴 109.247.145.207

🇮🇩 108.137.75.13

🇻🇳 103.7.41.144

🇫🇷 92.103.134.183

🇨🇳 47.113.100.24

🇱🇹 45.227.254.170

🇺🇸 20.109.38.118

🇺🇸 20.85.246.45

🇸🇬 15.235.149.236

🇺🇸 157.245.244.110

🇨🇳 120.193.9.167

🇺🇸 66.132.172.219

🇺🇸 40.80.204.175

🇴🇲 37.200.244.85

🇵🇰 223.123.35.47

🇨🇭 209.99.189.174