JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 16.79.112.1

16.79.112.1 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Jakarta
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-16-79-112-1.ap-southeast-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 16.79.112.1

Whois 16.79.112.1

IP Abuse Reports for 16.79.112.1:

This IP address has been reported a total of 21 times from 18 distinct sources. 16.79.112.1 was first reported on July 1st 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-02 09:16:41 (7 minutes ago)	(mod_security) mod_security (id:210492) triggered by 16.79.112.1 (ec2-16-79-112-1.ap-southeast-3.com ... show more (mod_security) mod_security (id:210492) triggered by 16.79.112.1 (ec2-16-79-112-1.ap-southeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:16:33.945355 2026] [security2:error] [pid 1899:tid 1899] [client 16.79.112.1:54787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accu-tuner.com"] [uri "/wp-config.php"] [unique_id "akYscfDPomWUWVJIpEvSEQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-02 08:39:05 (45 minutes ago)	Web vulnerability probing: /.well-known/content.php	Web App Attack
🇨🇦 Mediashaker	2026-07-02 08:29:15 (55 minutes ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 16.79.112.1 (ID/Indonesi ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 16.79.112.1 (ID/Indonesia/ec2-16-79-112-1.ap-southeast-3.compute.amazonaws.com) show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-02 07:57:52 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 16.79.112.1 (ec2-16-79-112-1.ap-southeast-3.com ... show more (mod_security) mod_security (id:210492) triggered by 16.79.112.1 (ec2-16-79-112-1.ap-southeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 03:57:47.818477 2026] [security2:error] [pid 3079:tid 3079] [client 16.79.112.1:57070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.johnheinrich.com"] [uri "/wp-config.php"] [unique_id "akYZ-8cMev-ILMY6C0_ENAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mw	2026-07-02 00:01:34 (9 hours ago)	GET /wp-admin/user/about.php HTTP/1.1	Web App Attack
🇫🇮 YF	2026-07-02 00:00:41 (9 hours ago)	WordPress content enumeration	Web App Attack
Anonymous	2026-07-01 23:05:25 (10 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (364/60 min)'; Requests=364	Port Scan
🇦🇺 screwlooseit.com.au	2026-07-01 22:55:23 (10 hours ago)	Blocked by CSF 13 firewall - Rule: US/United States/ec2-16-79-112-1.ap-southeast-3.compute.amazonaws ... show more Blocked by CSF 13 firewall - Rule: US/United States/ec2-16-79-112-1.ap-southeast-3.compute.amazonaws.com show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 22:28:49 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 16.79.112.1 (ec2-16-79-112-1.ap-southeast-3.com ... show more (mod_security) mod_security (id:210492) triggered by 16.79.112.1 (ec2-16-79-112-1.ap-southeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 18:28:41.967627 2026] [security2:error] [pid 23940:tid 23955] [client 16.79.112.1:60638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gotogps.com"] [uri "/wp-config.php"] [unique_id "akWUmcdcSnS1pyJXxICPTwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-07-01 22:06:00 (11 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-07-01 22:03:44 (11 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ID, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ID, Attack patterns: WordPress scanning, Webshell probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-07-01 21:48:00 (11 hours ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 Lee Daniel	2026-07-01 21:44:34 (11 hours ago)	16.79.112.1 - - [01/Jul/2026:17:44:33 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1 ... show more 16.79.112.1 - - [01/Jul/2026:17:44:33 -0400] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 16.79.112.1 - - [01/Jul/2026:17:44:33 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 16.79.112.1 - - [01/Jul/2026:17:44:33 -0400] "GET /.well-known/content.php HTTP/1.1" 404 38702 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 16.79.112.1 - - [01/Jul/2026:17:44:33 -0400] "GET /.well-known/gelay.php HTTP/1.1" 404 38693 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36" 16.79.112.1 - - [01/Jul/2026:17:44:33 -0400] "GET /.well-known/index.php HTTP/1.1" 404 38693 "-" "Mozilla/5.0 (Linux; Androi ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 21:23:41 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 16.79.112.1 (ec2-16-79-112-1.ap-southeast-3.com ... show more (mod_security) mod_security (id:210492) triggered by 16.79.112.1 (ec2-16-79-112-1.ap-southeast-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 17:23:34.564413 2026] [security2:error] [pid 16822:tid 16822] [client 16.79.112.1:52870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.instituteofscience.com"] [uri "/wp-config.php"] [unique_id "akWFVg7cO06da6G1eC0uZQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-01 20:57:13 (12 hours ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 185.121.15.184

🇸🇬 145.223.131.40

🇩🇪 64.89.163.64

🇸🇳 41.83.213.80

🇩🇪 4.184.246.230

🇩🇪 2a01:4f9:0:a010::add:1e

🇩🇪 2a01:4f9:0:a010::add:1d

🇳🇴 2603:1062:0:b8::1c

🇳🇿 122.58.112.21

🇨🇳 121.237.36.28

🇫🇷 85.217.140.40

🇪🇸 46.253.45.10

🇳🇱 45.148.10.147

🇯🇵 43.167.239.66

🇬🇧 35.203.211.243

🇷🇴 2.57.121.112

🇩🇪 2a01:4f9:0:a010::add:1a

🇪🇸 188.26.221.206

🇧🇩 103.105.86.37

🇸🇬 82.38.180.96