JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.230.80.38

23.230.80.38 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 15%: ?

15%

ISP	code200, UAB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	code200.global
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.230.80.38

Whois 23.230.80.38

IP Abuse Reports for 23.230.80.38:

This IP address has been reported a total of 11 times from 10 distinct sources. 23.230.80.38 was first reported on July 6th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-08-20 02:49:17 (1 hour ago)	Fail2Ban: 23.230.80.38 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 23.230.80.38 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-08-12 10:23:00 (1 week ago)	Fail2Ban: 23.230.80.38 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ... show more Fail2Ban: 23.230.80.38 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2352.1001 Mobile Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-07-05 00:01:19 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 securejdprop	2026-06-24 11:49:06 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇦🇺 prologic	2026-06-12 20:43:53 (2 months ago)	Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ... show more Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool. show less	DDoS Attack Web App Attack
Anonymous	2026-04-17 00:17:10 (4 months ago)	Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (iPhone; CPU iPhone OS 11_ ... show more Botnet-generated fake user-agent with impossible version. UA="Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.5450.1728 Mobile Safar" show less	Bad Web Bot
🇩🇪 Phenix Info	2026-04-16 04:40:20 (4 months ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇺🇸 TPI-Abuse	2026-01-05 02:00:03 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 23.230.80.38 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 23.230.80.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 20:59:55.801686 2026] [security2:error] [pid 9024:tid 9024] [client 23.230.80.38:14784] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|patandmat.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "patandmat.com"] [uri "/](http:/patandmat.com"] [unique_id "aVsbG8G88rgwMWrN0ChshwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2025-12-26 22:30:13 (7 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -32.332 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -32.332 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0. show less	Bad Web Bot Web App Attack
🇨🇭 backslash	2025-10-24 15:40:40 (9 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2025-07-06 19:27:43 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.53

🇺🇸 195.184.76.118

🇳🇬 102.88.137.213

🇷🇺 94.77.1.143

🇸🇬 74.114.28.16

🇺🇸 64.62.197.66

🇧🇪 34.52.247.120

🇩🇪 20.79.222.117

🇬🇧 193.163.125.199

🇮🇳 185.100.212.141

🇺🇸 162.216.150.50

🇸🇬 152.32.218.30

🇭🇰 152.32.172.84

🇺🇸 136.112.128.177

🇺🇸 64.62.197.65

🇺🇸 64.62.197.60

🇺🇸 64.62.197.59

🇱🇹 62.60.130.242

🇺🇦 37.203.18.103

🇧🇪 34.38.102.222