107.23.254.48
IP Risk Score: 100 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
United States (US)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Linux (50%)
- Device Type: Desktop (100%)
- Browser Family: Firefox (50%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP shows signs of malicious intent with a honeypot hit and access to a non-existent admin path, indicating potential probing behavior. The user-agent appears outdated and lacks JavaScript support, further suggesting automated activity. The IP is associated with AWS, which raises concerns about the nature of the traffic.
The supernet (107.23.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs utilizing similar user agents and performing repetitive low-interaction requests, suggesting potential automated scraping activity. However, the presence of a legitimate Amazonbot user agent indicates some benign activity, though the overall pattern raises concerns about analytics pollution and possible misuse of infrastructure.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.1
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.36
IP Location
Region: Virginia, United States
City: Ashburn
Local time: 2026-06-22 06:11:06