JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.147.225.219

16.147.225.219 was found in our database!

This IP was reported 173 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-16-147-225-219.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.147.225.219

Whois 16.147.225.219

IP Abuse Reports for 16.147.225.219:

This IP address has been reported a total of 173 times from 146 distinct sources. 16.147.225.219 was first reported on August 21st 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-08-23 03:09:35 (15 hours ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 16.147.225.219 104.23.160.70 - - [21/Aug/2026:02:31:30 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 16.147.225.219 104.23.160.70 - - [21/Aug/2026:02:31:30 -0300] "GET /wp-login.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇳🇱 oisecnet	2026-08-22 21:01:47 (21 hours ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-08-22. 37 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-08-22. 37 requests from this IP. show less	Port Scan Hacking Web App Attack
🇧🇪 Ivo Vynckier	2026-08-22 16:07:00 (1 day ago)	16.147.225.219 - - [21/Aug/2026:22:05:01 +0200] "GET /wp-json/ HTTP/1.1" 404 5550 "-" "Mozilla/5.0 ( ... show more 16.147.225.219 - - [21/Aug/2026:22:05:01 +0200] "GET /wp-json/ HTTP/1.1" 404 5550 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 16.147.225.219 - - [21/Aug/2026:22:05:03 +0200] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 craudiovizai	2026-08-22 12:30:12 (1 day ago)	Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-login.php. Blocked ... show more Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-login.php. Blocked at the edge. show less	Web App Attack Bad Web Bot
Anonymous	2026-08-22 10:35:17 (1 day ago)	Blocked by firewall on hugin [443/tcp] \| Rule: AbuseIPDB \| SPT: 43288 \| TTL: 64 \| LEN: 60 \| TOS: 0x0 ... show more Blocked by firewall on hugin [443/tcp] \| Rule: AbuseIPDB \| SPT: 43288 \| TTL: 64 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Trueforce Threat Report	2026-08-22 10:29:11 (1 day ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇭🇺 whitehoodie	2026-08-22 10:08:11 (1 day ago)	AUTOMATED REPORT: Trying to access /wp-login.php	Hacking Bad Web Bot Web App Attack
Anonymous	2026-08-22 09:52:16 (1 day ago)	Reported from Nginx log analysis 11. Log: 16.147.225.219 - - [22/Aug/2026:xx:xx:xx 0200] "GET / HTT ... show more Reported from Nginx log analysis 11. Log: 16.147.225.219 - - [22/Aug/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" "US United States Boardman" "AS16509" "Amazon.com, Inc." show less	Port Scan Brute-Force SSH
🇺🇸 Vianpyro	2026-08-22 09:07:12 (1 day ago)	Honeypot: 18 request(s) in 0 min. Paths: /, /wp-json/, /wp-login.php, /readme.html, /feed/. Method(s ... show more Honeypot: 18 request(s) in 0 min. Paths: /, /wp-json/, /wp-login.php, /readme.html, /feed/. Method(s): GET,POST. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 16509 (Amazon.com, Inc.). show less	Web App Attack Bad Web Bot Brute-Force Hacking
🇩🇪 sojan	2026-08-22 09:01:37 (1 day ago)	16.147.225.219 - - [22/Aug/2026:11:01:33 +0200] "GET / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows N ... show more 16.147.225.219 - - [22/Aug/2026:11:01:33 +0200] "GET / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 16.147.225.219 - - [22/Aug/2026:11:01:35 +0200] "GET /wp-json/ HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 16.147.225.219 - - [22/Aug/2026:11:01:36 +0200] "GET /wp-login.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 cwytech	2026-08-22 08:52:46 (1 day ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-cve-probing.	Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-08-22 08:52:07 (1 day ago)	Excessive HTTP request rate	Web App Attack
Anonymous	2026-08-22 08:46:17 (1 day ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-login.php	Web App Attack
🇵🇱 Budyn	2026-08-22 08:39:28 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: u.budyn.wtf \| URI: /wp-login.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-08-22 08:14:34 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-probing	Web App Attack Hacking

Showing 1 to 15 of 173 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400c:c05::12b

🇱🇹 213.176.26.88

🇺🇸 205.210.31.51

🇦🇷 190.177.250.200

🇺🇸 184.154.16.90

🇳🇱 160.119.76.27

🇩🇪 69.5.169.183

🇬🇧 45.133.173.220

🇮🇩 36.85.222.7

🇺🇸 216.25.89.120

🇳🇱 212.30.37.162

🇳🇱 195.178.110.217

🇬🇧 185.216.145.181

🇷🇴 185.100.87.136

🇮🇳 122.161.78.181

🇨🇳 112.86.225.39

🇲🇦 105.190.214.117

🇳🇱 86.54.31.32

🇧🇬 79.124.62.126

🇺🇸 74.38.205.71