JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 108.130.23.233

108.130.23.233 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-108-130-23-233.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 108.130.23.233

Whois 108.130.23.233

IP Abuse Reports for 108.130.23.233:

This IP address has been reported a total of 22 times from 19 distinct sources. 108.130.23.233 was first reported on August 27th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cwytech	2026-08-27 13:23:21 (3 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-probing.	Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-08-27 12:44:19 (4 hours ago)	Cloudflare WAF: Request Path: /.github/.env Request Query: Host: elhacker.net userAgent: Mozilla/5. ... show more Cloudflare WAF: Request Path: /.github/.env Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot) Action: block Source: firewallManaged ASN Description: Amazon.com, Inc. Country: IE Method: GET Timestamp: 2026-08-27T12:44:19Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
Anonymous	2026-08-27 12:29:55 (4 hours ago)	Portscan: TCP/8443 (10x), TCP/8080 (9x), TCP/80, TCP/443	Port Scan
🇩🇪 bazter.pro	2026-08-27 12:28:20 (4 hours ago)	Auto-Ban [2026-08-27 12:28:20]: CRITICAL: bot trap (soft) \| host=www.geoproceso.com \| route=/api/tra ... show more Auto-Ban [2026-08-27 12:28:20]: CRITICAL: bot trap (soft) \| host=www.geoproceso.com \| route=/api/trap/catalog-export \| hits=1 \| ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) show less	Hacking Web App Attack
🇸🇪 vaia.cloud	2026-08-27 12:15:05 (4 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇩🇪 arnisolutions	2026-08-27 11:42:06 (5 hours ago)	Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ... show more Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-08-27 and 2026-08-27 (UTC). Sample request: GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11 HTTP/2.0 show less	Web App Attack Hacking
🇳🇱 BlueWire Hosting	2026-08-27 10:58:52 (5 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇺🇸 nationaleventpros.com	2026-08-27 10:47:10 (5 hours ago)	vulnerability scan	Web App Attack
Anonymous	2026-08-27 10:44:44 (6 hours ago)	108.130.23.233 - - [27/Aug/2026:12:44:22 +0200] "GET /z9x8c7v6b5-debug-trigger-www.competa-online.de ... show more 108.130.23.233 - - [27/Aug/2026:12:44:22 +0200] "GET /z9x8c7v6b5-debug-trigger-www.competa-online.de HTTP/2.0" 403 294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot)" show less	Web Spam Blog Spam Brute-Force Web App Attack
🇪🇸 elcruzado.es	2026-08-27 10:21:11 (6 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 108.130.23.233 (IE/Ireland/ec2-108-130- ... show more (mod_security) mod_security triggered on hostname [redacted] 108.130.23.233 (IE/Ireland/ec2-108-130-23-233.eu-west-1.compute.amazonaws.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-08-27 10:12:32 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 108.130.23.233 (ec2-108-130-23-233.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 108.130.23.233 (ec2-108-130-23-233.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 06:12:27.479473 2026] [security2:error] [pid 3874:tid 3874] [client 108.130.23.233:34360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidocchino.com"] [uri "/.git/HEAD"] [unique_id "apANi-f7922zxN9ky5fpCAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 alferez	2026-08-27 10:02:53 (6 hours ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇧🇪 voormedia	2026-08-27 09:41:29 (7 hours ago)	Accessed trap at '/.aws/config'	Web App Attack
Anonymous	2026-08-27 09:10:04 (7 hours ago)	Bot / scanning and/or hacking attempts: GET /wp-config.php.old HTTP/2.0, GET /laravel/.env HTTP/2.0, ... show more Bot / scanning and/or hacking attempts: GET /wp-config.php.old HTTP/2.0, GET /laravel/.env HTTP/2.0, GET /account/login HTTP/2.0, GET /.openclaw/openclaw.json HTTP/2.0, GET /.openclaw/.env HTTP/2.0, GET /ssl/localhost.key HTTP/2.0, GET /.env.php.bak HTTP/2.0, GET /wp-config.php.bak HTTP/2.0, GET /files../.env HTTP/2.0, GET /static//.env HTTP/2.0, GET /media../.env HTTP/2.0 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 08:55:26 (7 hours ago)	(mod_security) mod_security (id:210730) triggered by 108.130.23.233 (ec2-108-130-23-233.eu-west-1.co ... show more (mod_security) mod_security (id:210730) triggered by 108.130.23.233 (ec2-108-130-23-233.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 04:55:19.302290 2026] [security2:error] [pid 22564:tid 22564] [client 108.130.23.233:49966] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.dmasoftlab.com\|F\|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dmasoftlab.com"] [uri "/rclone.conf"] [unique_id "ao_7d210RAggJb_fU2O5AgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.66.180.83

🇩🇪 198.251.88.78

🇺🇸 172.253.1.16

🇫🇮 147.185.133.80

🇮🇳 110.226.114.5

🇫🇷 88.169.25.204

🇦🇲 5.134.87.192

🇨🇴 190.60.55.86

🇸🇪 185.209.199.134

🇨🇱 146.235.242.141

🇨🇳 139.198.29.172

🇨🇳 112.86.225.48

🇮🇩 43.248.27.115

🇰🇪 41.139.202.58

🇺🇸 34.181.243.141

🇺🇸 34.139.126.221

🇮🇷 31.7.66.163

🇻🇳 27.79.46.185

🇺🇸 20.246.125.85

🇺🇸 20.14.90.113