JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.16.187.243

16.16.187.243 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 71%: ?

71%

ISP	Amazon Data Services Sweden
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-16-16-187-243.eu-north-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.16.187.243

Whois 16.16.187.243

IP Abuse Reports for 16.16.187.243:

This IP address has been reported a total of 12 times from 12 distinct sources. 16.16.187.243 was first reported on August 24th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-26 11:01:57 (3 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-24 17:07:03 (1 day ago)	Automated web scanner. Requested suspicious paths: /config/.env \| /.aws/config \| /.env.bak \| /.env.o ... show more Automated web scanner. Requested suspicious paths: /config/.env \| /.aws/config \| /.env.bak \| /.env.old \| /.env.backup \| /.env \| /.aws/credentials \| /phpinfo.php \| /.env.production \| /.env.local. UTC: 2026-08-24 16:08:12. show less	Web App Attack
🇺🇸 1gz	2026-08-24 16:13:14 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from SE. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from SE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php.bak UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇩 bps-statistics	2026-08-24 16:12:50 (1 day ago)	Web Application Attacks	Web App Attack
🇩🇪 dave	2026-08-24 16:12:42 (1 day ago)	threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ... show more threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/vpatch-env-access observed_by=1_hosts hit_count=5 first_seen=2026-08-24T16:12:41Z last_seen=2026-08-24T16:12:42Z show less	Web App Attack
🇺🇸 wordpresshosting.solutions	2026-08-24 16:12:08 (1 day ago)	Web app vulnerability scanning detected. Evidence: 16.16.187.243 - - [24/Aug/2026:16:12:08 +0000] "G ... show more Web app vulnerability scanning detected. Evidence: 16.16.187.243 - - [24/Aug/2026:16:12:08 +0000] "GET /.env.local HTTP/1.1" 404 11332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 16.16.187.243 - - [24/Aug/2026:16:12:08 +0000] "GET /.env.production HTTP/1.1" 404 11332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Web App Attack
🇵🇱 Budyn	2026-08-24 16:11:04 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: git.goblinpot.store \| URI: /.env.bak \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-08-24 16:10:18 (1 day ago)	[Mon Aug 24 18:10:17.424873 2026] [proxy_fcgi:error] [pid 4191446:tid 4191475] [remote 16.16.187.243 ... show more [Mon Aug 24 18:10:17.424873 2026] [proxy_fcgi:error] [pid 4191446:tid 4191475] [remote 16.16.187.243:0] AH01071: Got error 'Primary script unknown\n', referer: https://blog.elhacker.net/config.php [Mon Aug 24 18:10:17.665210 2026] [proxy_fcgi:error] [pid 2698:tid 4052] [remote 16.16.187.243:0] AH01071: Got error 'Primary script unknown\n', referer: https://blog.elhacker.net/info.php ... show less	Hacking Web App Attack
Anonymous	2026-08-24 16:10:02 (1 day ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇬🇧 WebNiraj	2026-08-24 16:07:59 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 16.16.187.243 (SE/Sweden/ec2-16-16-187-243.eu-n ... show more (mod_security) mod_security (id:949110) triggered by 16.16.187.243 (SE/Sweden/ec2-16-16-187-243.eu-north-1.compute.amazonaws.com): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇫🇷 danirod	2026-08-24 16:07:39 (1 day ago)	16.16.187.243 - - [24/Aug/2026:16:07:39 +0000] "GET https://cartero.danirod.es/wp-config.php HTTP/1. ... show more 16.16.187.243 - - [24/Aug/2026:16:07:39 +0000] "GET https://cartero.danirod.es/wp-config.php HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 0.000 16.16.187.243 - - [24/Aug/2026:16:07:39 +0000] "GET https://cartero.danirod.es/phpinfo.php HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 0.000 16.16.187.243 - - [24/Aug/2026:16:07:39 +0000] "GET https://cartero.danirod.es/config.php HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 0.000 ... show less	Brute-Force
🇺🇸 rdpguard.com	2026-08-24 16:07:22 (1 day ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 191.80.199.208

🇮🇳 45.248.94.28

🇳🇱 195.178.110.232

🇳🇱 195.178.110.137

🇳🇱 195.178.110.30

🇨🇱 190.215.134.183

🇸🇬 165.22.254.150

🇷🇺 146.158.118.252

🇫🇷 104.23.229.60

🇫🇷 91.231.89.205

🇫🇷 91.231.89.64

🇺🇸 71.227.205.95

🇮🇳 49.205.214.47

🇺🇸 34.230.221.101

🇮🇳 122.187.227.167

🇳🇱 45.156.128.91

🇺🇸 45.61.170.105

🇺🇸 34.125.247.9

🇺🇸 20.106.206.145

🇮🇷 217.18.94.226