JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.59.23.81

16.59.23.81 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 54%: ?

54%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-16-59-23-81.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.59.23.81

Whois 16.59.23.81

IP Abuse Reports for 16.59.23.81:

This IP address has been reported a total of 16 times from 8 distinct sources. 16.59.23.81 was first reported on July 24th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2026-07-25 01:22:28 (4 hours ago)	Too many 404 requests [BY]	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-24 22:01:42 (8 hours ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇨🇿 SystemAdmin	2026-07-24 13:33:37 (16 hours ago)	Doing bad things...	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-24 12:34:45 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:34:40.085829 2026] [security2:error] [pid 2390819:tid 2390819] [client 16.59.23.81:47322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.delunafamily.thelowensteinfamily.com"] [uri "/.git/config"] [unique_id "amNb4A-X_pU0xO6uZto_7gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-24 11:26:58 (18 hours ago)	[FriJul2413:26:53.8376842026][security2:error][pid2771127:tid2771511][client16.59.23.81:0]ModSecurit ... show more [FriJul2413:26:53.8376842026][security2:error][pid2771127:tid2771511][client16.59.23.81:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.dellafoglia.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"amNL_e7mLP5Ja_w1rso04gAAAU8\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 10:58:11 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:58:04.113788 2026] [security2:error] [pid 3408955:tid 3408955] [client 16.59.23.81:49890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.delidalga.chevronparkett.com"] [uri "/.git/config"] [unique_id "amNFPGhuLQ1K8OphhF1cjgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 10:04:28 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:04:21.765330 2026] [security2:error] [pid 15726:tid 15726] [client 16.59.23.81:46752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dekosh.koshland.us"] [uri "/.git/config"] [unique_id "amM4pfMWH9xXZUM6kPjuEgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-24 09:41:45 (20 hours ago)	Try to access /.git/config	Web App Attack
🇳🇱 Site.eu	2026-07-24 08:59:15 (21 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-24 07:29:35 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:29:30.689761 2026] [security2:error] [pid 1058007:tid 1058007] [client 16.59.23.81:51238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.deepseasugar.com.lakesidedetectiveagency.com"] [uri "/.git/config"] [unique_id "amMUWg-EXYzLZyxeZp9wtwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-07-24 06:42:35 (23 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:57:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:57:24.340562 2026] [security2:error] [pid 54808:tid 54808] [client 16.59.23.81:43854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.debzy.tolenaar.com"] [uri "/.git/config"] [unique_id "amLwtGOjGCQLEH3x_bOBPwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 04:19:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 00:19:05.420324 2026] [security2:error] [pid 1045000:tid 1045000] [client 16.59.23.81:52712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.debhill.alhill.com"] [uri "/.git/config"] [unique_id "amLnuQUI8TFp4XWZ2-cewgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 03:56:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 23:56:55.806885 2026] [security2:error] [pid 311760:tid 311810] [client 16.59.23.81:50446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.deathconfusion.mylordsday.com"] [uri "/.git/config"] [unique_id "amLih8HJ_sqL_jpc8T5LwgAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 03:26:48 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute. ... show more (mod_security) mod_security (id:210492) triggered by 16.59.23.81 (ec2-16-59-23-81.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 23:26:41.602093 2026] [security2:error] [pid 3925257:tid 3925257] [client 16.59.23.81:40548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.deals.directnic-support.rocks"] [uri "/.git/config"] [unique_id "amLbcTdmVFbqEw2H0KZLuAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1008::52

🇲🇽 187.212.37.143

🇮🇩 103.59.160.72

🇨🇦 85.217.149.69

🇨🇦 51.161.37.139

🇮🇪 2a05:d018:bb5:3302:14b3:cb56:8f31:baed

🇧🇷 179.82.154.225

🇧🇷 170.84.216.80

🇬🇧 154.16.44.187

🇺🇸 146.190.157.116

🇺🇸 107.150.104.66

🇭🇰 104.208.94.19

🇳🇱 87.199.200.27

🇩🇪 69.5.169.199

🇨🇦 54.39.136.34

🇨🇦 51.222.168.100

🇬🇧 45.133.173.177

🇳🇱 5.61.209.92

🇺🇸 147.185.132.197

🇭🇰 95.135.189.150