JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.59.59.72

16.59.59.72 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-16-59-59-72.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.59.59.72

Whois 16.59.59.72

IP Abuse Reports for 16.59.59.72:

This IP address has been reported a total of 24 times from 21 distinct sources. 16.59.59.72 was first reported on July 28th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mrcrassi	2026-07-29 23:35:02 (5 hours ago)	Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.57 Safari/537.36 OPR/18.0.1284.49 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 LotPhantom	2026-07-29 22:50:33 (6 hours ago)	16.59.59.72 - - [29/Jul/2026:22:49:32 +0000] "GET / HTTP/1.1" 404 39 "-" "Mozilla/5.0 (OS/2; Warp 4. ... show more 16.59.59.72 - - [29/Jul/2026:22:49:32 +0000] "GET / HTTP/1.1" 404 39 "-" "Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Firefox/45.0 SeaMonkey/2.42.9esr" "0" ... show less	Web App Attack
🇮🇩 Burayot	2026-07-29 22:46:17 (6 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 16.59.59.72 (US/United States/ec2-16 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 16.59.59.72 (US/United States/ec2-16-59-59-72.us-east-2.compute.amazonaws.com): 1 in the last 3600 secs show less	Web App Attack
🇮🇹 VHosting	2026-07-29 20:05:04 (8 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 Lezetho	2026-07-29 20:00:09 (9 hours ago)	DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare	DDoS Attack Email Spam Hacking Brute-Force
🇳🇴 Bots.go.to.hell	2026-07-29 19:31:32 (9 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇩🇪 yvoictra	2026-07-29 19:00:14 (10 hours ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-bad-user-agent	Web App Attack
🇺🇸 masterguru	2026-07-29 18:48:08 (10 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "jaunt" at REQUEST_HEADERS:User-Agent. (1100000-169)	Bad Web Bot
🇩🇪 barbarella	2026-07-29 17:44:01 (11 hours ago)	Illegal http header (GET /)	Hacking Web App Attack
🇫🇷 masterguru	2026-07-29 17:42:06 (11 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-195 ... show more BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-195) show less	Bad Web Bot
🇺🇸 Gabriel Camargo	2026-07-29 15:32:57 (13 hours ago)	16.59.59.72 - - [29/Jul/2026:10:32:21 -0500] "GET /custom.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Sym ... show more 16.59.59.72 - - [29/Jul/2026:10:32:21 -0500] "GET /custom.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Symbian/3; Series60/5.2 NokiaC7-00/012.003; Profile/MIDP-2.1 Configuration/CLDC-1.1 ) AppleWebKit/525 (KHTML, like Gecko) Version/3.0 BrowserNG/7.2.7.3 3gpp-gba" 16.59.59.72 - - [29/Jul/2026:10:32:57 -0500] "GET /flickity.pkgd.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 OPR/32.0.1948.25" 16.59.59.72 - - [29/Jul/2026:10:32:57 -0500] "GET /jquery.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Safari/537.36" ... show less	Brute-Force SSH
🇩🇪 4server	2026-07-29 14:48:16 (14 hours ago)	[WedJul2916:48:13.8034422026][security2:error][pid1683244:tid1683329][client16.59.59.72:0]ModSecurit ... show more [WedJul2916:48:13.8034422026][security2:error][pid1683244:tid1683329][client16.59.59.72:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"feldenkraisticino.ch.136-243-54-122.cpanel.site\"][uri\"/\"][unique_id\"amoSrefhmFWeakLEAUk7BAAAAMk\"] show less	Port Scan Brute-Force Web App Attack
🇧🇪 cmbplf	2026-07-29 14:02:08 (15 hours ago)	8.902 requests in 1 hour (1mo3w6d)	Brute-Force Bad Web Bot
🇦🇺 aranguren.org	2026-07-28 20:58:37 (1 day ago)	16.59.59.72 - - [29/Jul/2026:06:57:13 +1000] "GET //pagead2.googlesyndication.com/pagead/js/adsbygoo ... show more 16.59.59.72 - - [29/Jul/2026:06:57:13 +1000] "GET //pagead2.googlesyndication.com/pagead/js/adsbygoogle.js HTTP/1.1" 404 985 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 16.59.59.72 - - [29/Jul/2026:06:57:13 +1000] "GET /ga.js HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Linux; Android 10; ONEPLUS A5010) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36" 16.59.59.72 - - [29/Jul/2026:06:57:51 +1000] "GET //pagead2.googlesyndication.com/pagead/js/adsbygoogle.js HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.61 Safari/537.36 ArchiveBox/0.6.2" 16.59.59.72 - - [29/Jul/2026:06:57:51 +1000] "GET /ga.js HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Linux; Android 10; Redmi Note 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36" 16.59.59.72 - - [29/Jul/2026:06:58:36 +1000] "GET //pagead2.googlesyndication ... show less	Bad Web Bot
🇦🇺 Block Rockin' Beats	2026-07-28 19:42:02 (1 day ago)	Scanning for exploitable scripts	Hacking Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 110.152.86.183

🇺🇸 52.91.97.115

🇬🇧 35.203.211.136

🇺🇸 2a13:dcc6:77cf:3323:d115:a5ad:94a:1674

🇺🇸 207.97.190.89

🇺🇸 205.210.31.18

🇹🇷 195.87.36.18

🇩🇪 178.128.202.146

🇸🇬 172.236.141.19

🇺🇸 172.105.147.232

🇩🇪 167.94.146.40

🇺🇸 162.216.149.161

🇳🇱 158.173.3.173

🇺🇸 154.19.231.86

🇸🇬 104.64.206.154

🇧🇩 103.183.63.62

🇺🇸 66.132.186.242

🇺🇸 64.185.224.130

🇫🇷 51.159.95.78

🇩🇪 51.89.21.220