JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.61.150.193

16.61.150.193

Activity Trending Down

13 reports found in our database

60% ▼ ▼ ▼ Elevated

Abuse confidence score ?

ISP

Amazon.com, Inc.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-16-61-150-193.eu-west-2.compute.amazonaws.com

Domain Name

amazon.com

Country

🇬🇧 United Kingdom of Great Britain and Northern Ireland

City

London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 16.61.150.193:

This IP address has been reported a total of 13 times from 13 distinct sources. 16.61.150.193 was first reported on September 3rd 2026, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: Germany with 4 reports; France with 3 reports; Netherlands with 2 reports. The most common categories in these recent reports were: Web App Attack 11 times; Brute-Force 3 times; Bad Web Bot 3 times; Hacking 3 times; SQL Injection 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-06 21:59:32 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-05. show less	Web App Attack SSH Hacking
🇭🇳 remurillod80	2026-09-06 15:34:34 (1 week ago)	[Sun Sep 06 09:34:33.422808 2026] [security2:error] [pid 1081481:tid 1081481] [client 16.61.150.193: ... show more [Sun Sep 06 09:34:33.422808 2026] [security2:error] [pid 1081481:tid 1081481] [client 16.61.150.193:58144] ModSecurity: Warning. Pattern match "(?i)(?:b[\\"'\\\\)\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?@_a-\\\\{])?\\\\x5c?u[\\"'\\\$\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\$\\\\\\\\-0-9\\\\?@_a-\\\\{])?\\\\x5c?s[\\"'\\\$\\\\[\\\\x5c](?:(?:(?:\\\\\|\\\\\|\|&&)[\\\\s\\\\x0b])?\\\\$[!#\\\\(\\\\*\\\\-0-9\\ ..." at ARGS:0. [file "/etc/modsecurity/crs/current/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "205"] [id "932235"] [msg "Remote Command Execution: Unix Command Injection (command without evasion)"] [data "Matched Data: \| base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.main ... show less	Web Spam Hacking SQL Injection Brute-Force Web App Attack
🇩🇪 paissangroup	2026-09-06 14:07:41 (1 week ago)	Multiple WAF Violations	Web App Attack
🇳🇱 ConsulHosting	2026-09-06 10:21:06 (1 week ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
Anonymous	2026-09-06 06:08:49 (1 week ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇫🇷 dynamix	2026-09-06 03:22:23 (1 week ago)	Multiple WAF Violations	Web App Attack
🇫🇷 Octopuce	2026-09-05 20:04:09 (1 week ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇵🇱 Budyn	2026-09-05 19:06:37 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.goblinpot.tech \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇷 spot	2026-09-05 18:57:03 (1 week ago)	16.61.150.193 - - [05/Sep/2026:19:57:02 +0100] "GET /.env HTTP/1.1" 404 543 "-" "Mozilla/5.0 (X11; L ... show more 16.61.150.193 - - [05/Sep/2026:19:57:02 +0100] "GET /.env HTTP/1.1" 404 543 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack VPN IP
🇩🇪 AetherFox	2026-09-05 18:21:49 (1 week ago)	AetherFox VoidGuard detected: [Sat Sep 05 18:21:48.409162 2026] [authz_core:error] [pid 731612:tid 7 ... show more AetherFox VoidGuard detected: [Sat Sep 05 18:21:48.409162 2026] [authz_core:error] [pid 731612:tid 731620] [client 16.61.150.193:45728] AH01630: client denied by server configuration: proxy:https://[MASKED]/.git/config [Sat Sep 05 18:21:48.494076 2026] [authz_core:error] [pid 731612:tid 731619] [client 16.61.150.193:45728] AH01630: client denied by server configuration: proxy:https://[MASKED]/.env.local [Sat Sep 05 18:21:48.531387 2026] [authz_core:error] [pid 731612:tid 731624] [client 16.61.150.193:45728] AH01630: client denied by server configuration: proxy:https://[MASKED]/.env.production [Sat Sep 05 18:21:48.571936 2026] [authz_core:error] [pid 731612:tid 731644] [client 16.61.150.193:45728] AH01630: client denied by server configuration: proxy:https://[MASKED]/.env.staging [Sat Sep 05 18:21:48.607944 2026] [authz_core:error] [pid 731612:tid 731659] [client 16.61.150.193:45728] AH01630: client denied by server configuration: proxy:https://5.75.191.3 ... show less	Bad Web Bot Web App Attack
🇩🇪 loebas	2026-09-05 17:37:07 (1 week ago)	[4xx]Probing for non existant files, or client not authorized	Hacking Bad Web Bot Web App Attack
🇩🇪 hchristo	2026-09-05 13:12:30 (1 week ago)	[Sat Sep 05 15:12:18.935345 2026] [authz_core:error] [pid 13000:tid 13064] [client 16.61.150.193:378 ... show more [Sat Sep 05 15:12:18.935345 2026] [authz_core:error] [pid 13000:tid 13064] [client 16.61.150.193:37844] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env.bak [Sat Sep 05 15:12:19.892858 2026] [authz_core:error] [pid 13000:tid 13052] [client 16.61.150.193:37844] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env.save [Sat Sep 05 15:12:19.910818 2026] [authz_core:error] [pid 13000:tid 13054] [client 16.61.150.193:37844] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env.old [Sat Sep 05 15:12:30.284062 2026] [authz_core:error] [pid 13000:tid 13085] [client 16.61.150.193:37844] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env.swp [Sat Sep 05 15:12:30.302293 2026] [authz_core:error] [pid 13000:tid 13065] [client 16.61.150.193:37844] AH01630: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/.env~ ... show less	Brute-Force
Anonymous	2026-09-03 22:07:37 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 16.61.150.193 (GB/United Kingdom/ec2-16 ... show more (mod_security) mod_security triggered on hostname [redacted] 16.61.150.193 (GB/United Kingdom/ec2-16-61-150-193.eu-west-2.compute.amazonaws.com) show less	SQL Injection

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.37.155.83

🇧🇬 109.160.32.119

🇺🇸 91.230.168.8

🇫🇷 81.65.147.185

🇮🇪 68.219.102.153

🇺🇸 49.51.183.15

🇲🇾 47.254.245.248

🇰🇷 219.248.4.146

🇺🇸 205.210.31.84

🇺🇸 188.213.202.89

🇺🇸 151.240.93.18

🇺🇸 147.185.132.201

🇷🇴 92.118.39.50

🇫🇷 91.231.89.110

🇵🇱 34.116.162.76

🇺🇸 24.142.170.231

🇸🇪 146.247.242.84

🇺🇸 134.33.97.181

🇧🇩 123.49.12.183

🇨🇳 115.210.224.115