JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.16.115.215

16.16.115.215 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 37%: ?

37%

ISP	Amazon Data Services Sweden
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-16-16-115-215.eu-north-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.16.115.215

Whois 16.16.115.215

IP Abuse Reports for 16.16.115.215:

This IP address has been reported a total of 9 times from 7 distinct sources. 16.16.115.215 was first reported on May 1st 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-06-04 15:58:59 (3 days ago)	http-admin-interface-probing - IP: 16.16.115.215 - time="2026-06-04T17:58:58+02:00" level=info msg= ... show more http-admin-interface-probing - IP: 16.16.115.215 - time="2026-06-04T17:58:58+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-admin-interface-probing by ip 16.16.115.215 (SE/16509) : 4h ban on Ip 16.16.115.215" module=db show less	Web App Attack
🇪🇸 netfactotum	2026-06-04 11:37:10 (3 days ago)		Hacking Web App Attack
🇺🇸 mnsf	2026-05-29 14:05:28 (1 week ago)	Abuse Detected (2)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 23:50:40 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 16.16.115.215 (ec2-16-16-115-215.eu-north-1.com ... show more (mod_security) mod_security (id:210492) triggered by 16.16.115.215 (ec2-16-16-115-215.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 19:50:34.715021 2026] [security2:error] [pid 6671:tid 6671] [client 16.16.115.215:51243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billhumphreyresearch.com"] [uri "/.env"] [unique_id "ahjUymIAoNTWXsjECiFH5QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-18 07:15:35 (3 weeks ago)	Web vulnerability probing: /wp-admin/install.php	Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 14:25:12 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 16.16.115.215 (ec2-16-16-115-215.eu-north-1.com ... show more (mod_security) mod_security (id:210492) triggered by 16.16.115.215 (ec2-16-16-115-215.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 10:25:04.669314 2026] [security2:error] [pid 25602:tid 25602] [client 16.16.115.215:59871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "votefordave.org"] [uri "/.env"] [unique_id "afygwJP0ATfxLhXTcSt4kQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 David Koswari	2026-05-04 05:52:00 (1 month ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 ANTI SCANNER	2026-05-02 12:47:17 (1 month ago)	Scanner : /wp-admin/install.php	Web Spam
🇨🇭 Origon	2026-05-01 11:11:15 (1 month ago)	http-admin-interface-probing - IP: 16.16.115.215 - time="2026-05-01T13:11:14+02:00" level=info msg= ... show more http-admin-interface-probing - IP: 16.16.115.215 - time="2026-05-01T13:11:14+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-admin-interface-probing by ip 16.16.115.215 (SE/16509) : 4h ban on Ip 16.16.115.215" module=db show less	Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 125.142.37.91

🇩🇪 91.17.27.218

🇨🇴 191.97.12.90

🇺🇸 157.245.238.155

🇩🇪 141.11.107.166

🇻🇳 116.99.174.175

🇮🇳 115.96.148.137

🇩🇪 95.85.238.22

🇮🇷 93.117.120.92

🇺🇸 91.230.168.134

🇱🇹 81.30.98.49

🇮🇱 77.137.66.224

🇺🇸 66.132.172.241

🇮🇩 34.101.170.100

🇺🇸 31.59.118.33

🇨🇳 14.103.118.194

🇮🇷 2.187.24.214

🇮🇹 185.68.178.178

🇧🇷 129.121.42.236

🇫🇷 88.164.37.237