JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.23.111.159

3.23.111.159 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-23-111-159.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.23.111.159

Whois 3.23.111.159

IP Abuse Reports for 3.23.111.159:

This IP address has been reported a total of 60 times from 49 distinct sources. 3.23.111.159 was first reported on January 11th 2021, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2025-09-03 05:13:29 (11 months ago)	2 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇺🇸 octageeks.com	2025-09-03 04:06:22 (11 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇩🇪 dbmwebdesign	2025-09-03 00:00:30 (11 months ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
Anonymous	2025-09-02 20:15:58 (11 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇫🇷 ᴀʀᴛ	2025-09-02 16:50:41 (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. ASN: 16509 (AMAZON-02) Protocol: HTTP/1.1 (GET me ... show more Triggered Cloudflare WAF (firewallCustom) from US. ASN: 16509 (AMAZON-02) Protocol: HTTP/1.1 (GET method) UA: Mozilla/5.0 (Ubuntu; Linux i686; rv:122.0) Gecko/20100101 Firefox/122.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-09-02 16:35:07 (11 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-02 16:34:38 (11 months ago)	Failed login attempt detected by Fail2Ban in recidive jail	Brute-Force
🇩🇪 HERA - Operations	2025-09-02 16:31:58 (11 months ago)	sensobox - searching for vulnerable scripts: config 2025/09/02 18:31:58	Web App Attack
🇺🇸 mnsf	2025-09-02 16:05:17 (11 months ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇲🇾 Rizzy	2025-09-02 15:47:39 (11 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 0x44	2025-09-02 15:36:04 (11 months ago)	3.23.111.159 [02/Sep/2025] - Spam host detected, probing for vulnerabilities ...	Web Spam Exploited Host Web App Attack
🇫🇮 Jordy	2025-09-02 15:34:00 (11 months ago)	02/Sep/2025:17:35:51.496587 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 02/Sep/2025:17:35:51.496587 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 3.23.111.159] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "vps.familievandemaat.nl"] [uri "/.git/config"] [unique_id "aLcO1zh0fXYSWa6Im_uhVgAAAAg"] 02/Sep/2025:17:35:51.496587 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 3.23.111.159] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILEN ... show less	Web App Attack
🇫🇮 Christopher Hughes	2025-09-02 15:33:15 (11 months ago)	.git/config scan	Web App Attack
🇺🇸 TPI-Abuse	2025-09-02 15:26:43 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 3.23.111.159 (ec2-3-23-111-159.us-east-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 3.23.111.159 (ec2-3-23-111-159.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 02 11:26:37.182938 2025] [security2:error] [pid 21768:tid 21768] [client 3.23.111.159:50192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "turedinmobiliaria.com"] [uri "/.git/config"] [unique_id "aLcMrddlnfqUq5VaaF6yYwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2025-09-02 15:24:21 (11 months ago)	Restricted File Access Attempt. Matched phrase "/.git/" at REQUEST_FILENAME. (930130-122)	Hacking Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.75.7.31

🇲🇩 104.28.203.248

🇸🇬 43.163.7.67

🇨🇳 220.202.112.176

🇸🇪 217.64.148.102

🇧🇷 205.210.31.174

🇳🇱 193.47.62.69

🇺🇸 162.216.149.253

🇬🇧 154.16.44.150

🇷🇺 90.151.171.109

🇷🇺 90.151.171.108

🇳🇱 172.71.98.46

🇺🇸 98.174.61.78

🇱🇹 91.224.92.107

🇫🇷 90.40.70.202

🇺🇸 35.185.102.31

🇳🇱 195.178.110.18

🇹🇷 176.236.143.162

🇬🇧 154.16.44.210

🇺🇸 146.190.75.39