JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 108.130.68.109

108.130.68.109 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 79%: ?

79%

ISP	Amazon Data Services Ireland Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-108-130-68-109.eu-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇮🇪 Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 108.130.68.109

Whois 108.130.68.109

IP Abuse Reports for 108.130.68.109:

This IP address has been reported a total of 16 times from 13 distinct sources. 108.130.68.109 was first reported on July 24th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-07-26 12:54:56 (11 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-07-26 08:06:42 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 108.130.68.109 (ec2-108-130-68-109.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 108.130.68.109 (ec2-108-130-68-109.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 04:06:35.065712 2026] [security2:error] [pid 228468:tid 228602] [client 108.130.68.109:47050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "farmerlabor.org"] [uri "/.git/config"] [unique_id "amXACzKzflJBG63rgxxH0QAAANI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Petros Stefanakis	2026-07-26 07:43:35 (16 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 108.130.68.109 (IE/Ireland/ec2-108-130- ... show more (mod_security) mod_security triggered on hostname [redacted] 108.130.68.109 (IE/Ireland/ec2-108-130-68-109.eu-west-1.compute.amazonaws.com) show less	SQL Injection
🇩🇪 4server	2026-07-26 07:02:30 (17 hours ago)	[SunJul2609:02:27.5551892026][security2:error][pid1068034:tid1068055][client108.130.68.109:0]ModSecu ... show more [SunJul2609:02:27.5551892026][security2:error][pid1068034:tid1068055][client108.130.68.109:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"farmaciaferrari.ch\"][uri\"/\"][unique_id\"amWxAwbcb5QxACBp60vvDQAAAIs\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 mediarama.com	2026-07-26 04:20:48 (19 hours ago)	Banned by Fail2Ban	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-25 22:01:07 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24. show less	Web App Attack SSH Hacking
Anonymous	2026-07-25 16:32:24 (1 day ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇩🇪 hchristo	2026-07-25 04:25:23 (1 day ago)	[Sat Jul 25 06:25:23.200126 2026] [proxy_fcgi:error] [pid 64936:tid 65009] [client 108.130.68.109:60 ... show more [Sat Jul 25 06:25:23.200126 2026] [proxy_fcgi:error] [pid 64936:tid 65009] [client 108.130.68.109:60302] AH01071: Got error 'Primary script unknown' [Sat Jul 25 06:25:23.230548 2026] [proxy_fcgi:error] [pid 64936:tid 65032] [client 108.130.68.109:60302] AH01071: Got error 'Primary script unknown' [Sat Jul 25 06:25:23.256607 2026] [proxy_fcgi:error] [pid 64936:tid 65013] [client 108.130.68.109:60302] AH01071: Got error 'Primary script unknown' [Sat Jul 25 06:25:23.282730 2026] [proxy_fcgi:error] [pid 64936:tid 65022] [client 108.130.68.109:60302] AH01071: Got error 'Primary script unknown' [Sat Jul 25 06:25:23.313546 2026] [proxy_fcgi:error] [pid 64936:tid 65029] [client 108.130.68.109:60302] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇳🇱 Savvii	2026-07-25 01:53:22 (1 day ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SilverZippo	2026-07-25 00:46:54 (1 day ago)	Web App Attack	Web App Attack
Anonymous	2026-07-25 00:05:11 (2 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇳🇱 homeshowdomain.nl	2026-07-24 21:59:47 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-24	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-24 07:37:15 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 108.130.68.109 (ec2-108-130-68-109.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 108.130.68.109 (ec2-108-130-68-109.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:37:11.777161 2026] [security2:error] [pid 3990742:tid 3990742] [client 108.130.68.109:38636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accomplishedmagazine.com"] [uri "/.git/config"] [unique_id "amMWJ9RHa_JxC77DGBmDdwAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 07:34:05 (2 days ago)	108.130.68.109 - - [24/Jul/2026:02:34:01 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 ... show more 108.130.68.109 - - [24/Jul/2026:02:34:01 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 208.109.0.22 108.130.68.109 - - [24/Jul/2026:02:34:01 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 208.109.0.22 108.130.68.109 - - [24/Jul/2026:02:34:01 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 208.109.0.22 108.130.68.109 - - [24/Jul/2026:02:34:02 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 208.109.0.22 108.130.68.109 - - [24/Jul/2026:02:34:02 -0500] "GET /.env.test HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0. ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:18:58 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 108.130.68.109 (ec2-108-130-68-109.eu-west-1.co ... show more (mod_security) mod_security (id:210492) triggered by 108.130.68.109 (ec2-108-130-68-109.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:18:52.260836 2026] [security2:error] [pid 233737:tid 233737] [client 108.130.68.109:52440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accinternational.net"] [uri "/.git/config"] [unique_id "amMR3DFQpXXzLCCXali0UgAAACo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:1a8:8018:c500:b48f:84ae:9f90:31f2

🇺🇦 188.191.21.95

🇨🇱 186.189.97.162

🇯🇴 176.29.31.44

🇮🇶 150.228.104.92

🇺🇸 104.248.228.22

🇧🇬 78.128.114.102

🇩🇿 41.111.78.57

🇮🇳 203.192.232.180

🇦🇴 193.163.125.160

🇺🇸 192.227.131.149

🇳🇱 192.42.116.110

🇻🇪 181.208.56.172

🇨🇴 181.32.166.36

🇿🇦 165.16.180.62

🇨🇳 115.190.213.72

🇫🇷 109.8.91.232

🇩🇿 105.102.34.97

🇻🇳 103.200.22.154

🇹🇳 102.159.25.27