JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.193.4.116

161.193.4.116 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 31%: ?

31%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-161-193-4-116.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Miami, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.193.4.116

Whois 161.193.4.116

IP Abuse Reports for 161.193.4.116:

This IP address has been reported a total of 45 times from 16 distinct sources. 161.193.4.116 was first reported on December 24th 2025, and the most recent report was 44 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-09-17 19:48:00 (44 minutes ago)	Form spam	Web Spam
🇪🇸 Cognisant-Security	2026-09-16 08:13:00 (1 day ago)	Form Spam	Web Spam Blog Spam
🇺🇸 TPI-Abuse	2026-09-08 17:57:24 (1 week ago)	(mod_security) mod_security (id:217280) triggered by 161.193.4.116 (ec2-161-193-4-116.compute-1.amaz ... show more (mod_security) mod_security (id:217280) triggered by 161.193.4.116 (ec2-161-193-4-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 13:57:17.099301 2026] [security2:error] [pid 8927:tid 8927] [client 161.193.4.116:63735] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.technesa.com\|F\|2"] [data "Matched Data: put found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.technesa.com"] [uri "/contacto.html"] [unique_id "aqBMfU2S95vHz5J8Tz7slAAAAA8"], referer: https://www.technesa.com/contacto.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2026-09-05 03:54:54 (1 week ago)	(From [email protected]) Good Morning I wanted to reach out and let you know ab ... show more (From [email protected]) Good Morning I wanted to reach out and let you know about our new dog harness. It's really easy to put on and take off - in just 2 seconds - and it's personalized for each dog. Plus, we offer a lifetime warranty so you can be sure your pet is always safe and stylish. We've had a lot of success with it so far and I think your dog would love it. Get yours today with 50% OFF: https://caredogbest.com FREE Shipping - TODAY ONLY! Thanks for your time, Eloisa show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2026-09-05 03:33:23 (1 week ago)	(mod_security) mod_security (id:217280) triggered by 161.193.4.116 (ec2-161-193-4-116.compute-1.amaz ... show more (mod_security) mod_security (id:217280) triggered by 161.193.4.116 (ec2-161-193-4-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 23:33:15.742941 2026] [security2:error] [pid 27136:tid 27136] [client 161.193.4.116:56478] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|myappliancehero.pro\|F\|2"] [data "Matched Data: put found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "myappliancehero.pro"] [uri "/contact.html"] [unique_id "apuNe0M41vd0vVqJolKuTQAAAAU"], referer: http://myappliancehero.pro/contact.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-08-15 17:03:01 (1 month ago)	block ruleset 4B683A634C4BD48E8EC96D976CAD65317F4DDD63	Web Spam
🇦🇺 oncord	2026-08-14 01:28:10 (1 month ago)	Form spam	Web Spam
🇺🇸 ipblock.com	2026-07-05 12:54:00 (2 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-06-27 23:56:00 (2 months ago)	IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider	Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2026-04-01 17:56:10 (5 months ago)	(From [email protected]) Good Morning I wanted to reach out and let you know about our new ... show more (From [email protected]) Good Morning I wanted to reach out and let you know about our new dog harness. It's really easy to put on and take off - in just 2 seconds - and it's personalized for each dog. Plus, we offer a lifetime warranty so you can be sure your pet is always safe and stylish. We've had a lot of success with it so far and I think your dog would love it. Get yours today with 50% OFF: https://caredogbest.com FREE Shipping - TODAY ONLY! Many Thanks, Suzanna show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2026-04-01 17:23:58 (5 months ago)	(mod_security) mod_security (id:217280) triggered by 161.193.4.116 (ec2-161-193-4-116.compute-1.amaz ... show more (mod_security) mod_security (id:217280) triggered by 161.193.4.116 (ec2-161-193-4-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 13:23:50.982283 2026] [security2:error] [pid 25502:tid 25502] [client 161.193.4.116:61503] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|sub-sea9gas.com\|F\|2"] [data "Matched Data: put found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "sub-sea9gas.com"] [uri "/index.php/contact"] [unique_id "ac1UppyPPVj-Zdmen_cEKgAAAAI"], referer: https://sub-sea9gas.com/index.php/contact show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2026-03-16 11:57:56 (6 months ago)	(From [email protected]) URGENT: Experienced NP Seeking Private Practice Opportunity Hi Doctor ... show more (From [email protected]) URGENT: Experienced NP Seeking Private Practice Opportunity Hi Doctor, Available to start within 2 - 3 weeks 5+ years in Family, Women’s health, Geriatrics Fluent in Spanish (if applicable) Comfortable with solo coverage or team-based care What I bring: - Strong clinical judgment and compassionate bedside manner - Efficient with 18-25 patients per day - Willing to take call/share weekend rotation if needed Let’s talk soon. Tom West show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-03-14 15:41:33 (6 months ago)	(From [email protected]) Hi, Good Morning. Are You Currently Hiring Nurse Practitioners F ... show more (From [email protected]) Hi, Good Morning. Are You Currently Hiring Nurse Practitioners F/T or P/T? Please Advise. Thanks, Sincerely - Nancy Smith show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-03-14 14:11:19 (6 months ago)	Hi, Good Morning. Are You Currently Hiring Nurse Practitioners F/T or P/T? Please Advise. T ... show more Hi, Good Morning. Are You Currently Hiring Nurse Practitioners F/T or P/T? Please Advise. Thanks, Sincerely - Nancy Smith show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2026-03-10 07:19:45 (6 months ago)	(mod_security) mod_security (id:217280) triggered by 161.193.4.116 (ec2-161-193-4-116.compute-1.amaz ... show more (mod_security) mod_security (id:217280) triggered by 161.193.4.116 (ec2-161-193-4-116.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 03:19:40.000320 2026] [security2:error] [pid 22111:tid 22111] [client 161.193.4.116:56781] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|gesegurospma.com\|F\|2"] [data "Matched Data: put found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "gesegurospma.com"] [uri "/"] [unique_id "aa_GCxSu4Dz3K_15d7sY7wAAAA8"], referer: http://gesegurospma.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 81.19.216.77

🇺🇸 209.153.21.133

🇸🇬 172.68.242.33

🇦🇪 151.245.151.218

🇺🇸 135.233.97.69

🇨🇴 129.222.203.193

🇻🇳 118.68.64.191

🇧🇫 102.180.9.156

🇷🇺 91.195.100.156

🇷🇴 2.57.121.25

🇺🇸 172.67.168.174

🇲🇾 113.23.225.9

🇨🇬 102.129.82.152

🇫🇷 85.217.140.37

🇩🇪 69.5.169.222

🇺🇸 52.167.144.205

🇨🇳 8.134.157.132

🇭🇷 5.181.2.70

🇹🇭 1.20.104.166

🇮🇩 202.152.148.27