JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.145.52.250

16.145.52.250 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 45%: ?

45%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-16-145-52-250.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.145.52.250

Whois 16.145.52.250

IP Abuse Reports for 16.145.52.250:

This IP address has been reported a total of 8 times from 7 distinct sources. 16.145.52.250 was first reported on March 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-30 22:05:57 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-29. show less	Web App Attack SSH Hacking
🇳🇱 oisecnet	2026-07-29 21:10:13 (2 days ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-07-29. 44 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-07-29. 44 requests from this IP. show less	Brute-Force Web App Attack SSH
🇺🇸 TPI-Abuse	2026-07-29 08:39:57 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 16.145.52.250 (ec2-16-145-52-250.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 16.145.52.250 (ec2-16-145-52-250.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 04:39:49.153901 2026] [security2:error] [pid 20661:tid 20661] [client 16.145.52.250:41076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oruhu.org"] [uri "/.git/config"] [unique_id "amm8VYWjojwpNt2TW3jKjAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-29 08:10:45 (2 days ago)	Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/co ... show more Automated Apache suspicious-path probe detected in last 15m: hits=204; wp-login_hits=0; url=/.git/config\|/.env\|/.env.local\|/.env.production\|/.env.staging\|/.env.development\|/.env.test\|/.env.remote\|(+196 more) show less	Web App Attack
🇮🇹 VHosting	2026-07-29 07:40:05 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-07-29 06:01:39 (2 days ago)	16.145.52.250 - - [29/Jul/2026:08:01:34 +0200] "GET /phpinfo.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 ... show more 16.145.52.250 - - [29/Jul/2026:08:01:34 +0200] "GET /phpinfo.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 16.145.52.250 - - [29/Jul/2026:08:01:34 +0200] "GET /php.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 16.145.52.250 - - [29/Jul/2026:08:01:35 +0200] "GET /i.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 16.145.52.250 - - [29/Jul/2026:08:01:35 +0200] "GET /pi.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 16.145.52.250 - - [29/Jul/2026:08:01:35 +0200] "GET /pinfo.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 16.145.52.25 ... show less	Web App Attack
🇫🇷 Octopuce	2026-07-29 05:30:54 (2 days ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 22:20:48 (4 months ago)	(mod_security) mod_security (id:210810) triggered by 16.145.52.250 (ec2-16-145-52-250.us-west-2.comp ... show more (mod_security) mod_security (id:210810) triggered by 16.145.52.250 (ec2-16-145-52-250.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 18:20:44.643132 2026] [security2:error] [pid 6825:tid 6825] [client 16.145.52.250:45846] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "X-Scanner" at REQUEST_HEADERS_NAMES:X-Scanner. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "20"] [id "210810"] [rev "4"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site\|\|www.steeltech.alitcogroup.com\|F\|2"] [data "X-Scanner"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.steeltech.alitcogroup.com"] [uri "/"] [unique_id "abXfPEOb3XG1su4C2_CnxAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.73.216.245

🇨🇳 171.104.81.215

🇬🇧 154.16.44.150

🇻🇳 103.118.28.15

🇺🇸 91.230.168.120

🇰🇷 58.224.62.29

🇭🇰 13.70.25.162

🇺🇸 172.190.89.127

🇫🇮 147.185.133.248

🇺🇸 147.185.132.20

🇵🇰 111.92.151.109

🇮🇩 103.108.130.11

🇳🇱 91.92.40.46

🇬🇧 81.19.219.201

🇸🇬 47.84.192.145

🇺🇸 34.216.177.95

🇺🇸 20.65.195.23

🇺🇸 205.210.31.67

🇨🇴 186.147.162.215

🇩🇪 167.94.145.22