JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 100.48.84.211

100.48.84.211 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 55%: ?

55%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-100-48-84-211.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 100.48.84.211

Whois 100.48.84.211

IP Abuse Reports for 100.48.84.211:

This IP address has been reported a total of 9 times from 8 distinct sources. 100.48.84.211 was first reported on August 21st 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 masterguru	2026-08-22 20:41:19 (6 hours ago)	Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\$(?:\\\\(.\\\\ ... show more Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.\\\$\|.)\\\\)\|\\\\{.\\\\})\| (932130-164) show less	Hacking
Anonymous	2026-08-22 20:04:44 (6 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇫🇷 ecode hosting	2026-08-22 15:49:04 (10 hours ago)	Domain : MailEnable WebMail Rule : env 2026-08-22 15:46:40 10.100.1.20 GET /bin/.env - 443 - 100.48. ... show more Domain : MailEnable WebMail Rule : env 2026-08-22 15:46:40 10.100.1.20 GET /bin/.env - 443 - 100.48.84.211 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - 404 8 0 144 - - show less	Hacking SQL Injection
🇳🇱 maxxsense	2026-08-22 09:01:53 (17 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 100.48.84.211 (US/United States/ec2-100 ... show more (mod_security) mod_security triggered on hostname [redacted] 100.48.84.211 (US/United States/ec2-100-48-84-211.compute-1.amazonaws.com) show less	SQL Injection
🇩🇪 rh24	2026-08-22 07:56:45 (18 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 100.48.84.211 (US/United States/ec2-100 ... show more (mod_security) mod_security triggered on hostname [redacted] 100.48.84.211 (US/United States/ec2-100-48-84-211.compute-1.amazonaws.com) show less	SQL Injection
🇩🇪 todix	2026-08-22 03:33:14 (23 hours ago)	Web App Attack Exploid from 100.48.84.211	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 01:28:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 100.48.84.211 (ec2-100-48-84-211.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 100.48.84.211 (ec2-100-48-84-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 21:28:37.693806 2026] [security2:error] [pid 9285:tid 9285] [client 100.48.84.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.earscript.net"] [uri "/.env"] [unique_id "aoj7RRKxGw5N9PLEXp2TiQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 11:23:28 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 100.48.84.211 (ec2-100-48-84-211.compute-1.amaz ... show more (mod_security) mod_security (id:210492) triggered by 100.48.84.211 (ec2-100-48-84-211.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 07:23:20.422787 2026] [security2:error] [pid 22373:tid 22373] [client 100.48.84.211:39918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.giganticmediallc.com"] [uri "/.git/config"] [unique_id "aog1KLsw5DvcXFl1hvBjqAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-21 10:15:06 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 8.213.135.73

🇫🇮 2a01:4f9:2a:45e::2

🇭🇰 220.246.42.227

🇨🇦 216.232.226.40

🇧🇪 207.175.205.217

🇫🇮 147.185.133.177

🇺🇸 146.190.164.28

🇺🇸 109.105.210.90

🇺🇸 84.37.242.146

🇮🇶 65.20.165.78

🇮🇳 59.99.142.109

🇨🇳 58.50.45.178

🇷🇺 46.39.249.132

🇬🇧 35.203.210.140

🇺🇸 205.210.31.13

🇺🇸 162.216.149.199

🇻🇳 157.10.45.192

🇨🇦 135.23.190.48

🇧🇷 118.26.105.52

🇨🇳 110.252.175.104