JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 15.228.248.84

15.228.248.84 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 49%: ?

49%

ISP	Amazon Data Services Brazil
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-15-228-248-84.sa-east-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 15.228.248.84

Whois 15.228.248.84

IP Abuse Reports for 15.228.248.84:

This IP address has been reported a total of 11 times from 7 distinct sources. 15.228.248.84 was first reported on July 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-07-16 22:05:21 (1 day ago)	Try to access /.git/config	Web App Attack
🇫🇷 dynamix	2026-07-16 13:03:03 (1 day ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 12:38:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 08:38:03.248644 2026] [security2:error] [pid 31336:tid 31343] [client 15.228.248.84:54926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newtrendmag.org"] [uri "/.git/config"] [unique_id "aljQq2jZ6YJH4xNUN81leQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 10:46:06 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 06:45:58.697091 2026] [security2:error] [pid 1942:tid 1942] [client 15.228.248.84:60082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "new.taekwondoit.com"] [uri "/.git/config"] [unique_id "ali2ZhRjpglgoWRVZA0p9QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 09:46:54 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 05:46:46.792038 2026] [security2:error] [pid 8474:tid 8474] [client 15.228.248.84:43378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newsubdomain.markgiffin.com"] [uri "/.git/config"] [unique_id "aliohhd9dTiao3o0LYPXVwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 07:52:28 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 03:52:24.229737 2026] [security2:error] [pid 16958:tid 16992] [client 15.228.248.84:39748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newsrank.us"] [uri "/.git/config"] [unique_id "aliNuEzDK1bIBZFAE2sbTwAAANg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 tedmichalik.com	2026-07-16 07:35:28 (1 day ago)	15.228.248.84 - - [16/Jul/2026:03:35:17 -0400] "GET /.git/config HTTP/1.1" 404 35841 "-" "Mozilla/5. ... show more 15.228.248.84 - - [16/Jul/2026:03:35:17 -0400] "GET /.git/config HTTP/1.1" 404 35841 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 VHosting	2026-07-15 22:40:03 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-15 21:59:28 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-15	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-15 00:24:13 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 15.228.248.84 (ec2-15-228-248-84.sa-east-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 20:24:07.092722 2026] [security2:error] [pid 2587:tid 2587] [client 15.228.248.84:44562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "towermedia.net"] [uri "/.git/config"] [unique_id "albTJ-5kOrqP8azNQpHT1gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-14 23:05:24 (3 days ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:11ff:44::

🇧🇷 177.174.89.99

🇧🇷 177.174.16.55

🇺🇸 147.185.132.187

🇹🇷 94.154.43.179

🇫🇷 91.196.152.6

🇺🇸 74.235.120.62

🇮🇳 49.47.135.38

🇬🇧 35.203.211.28

🇯🇵 8.216.9.202

🇧🇷 177.174.0.3

🇭🇰 156.251.179.157

🇺🇸 147.185.208.74

🇷🇴 141.98.83.48

🇮🇳 122.160.137.230

🇳🇬 102.90.34.90

🇳🇱 86.54.31.40

🇨🇦 85.217.149.34

🇧🇬 79.124.60.146

🇺🇸 66.132.172.44