JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.168.107.8

35.168.107.8 was found in our database!

This IP was reported 198 times. Confidence of Abuse is 66%: ?

66%

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14618
Hostname(s)	ec2-35-168-107-8.compute-1.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.168.107.8

Whois 35.168.107.8

IP Abuse Reports for 35.168.107.8:

This IP address has been reported a total of 198 times from 21 distinct sources. 35.168.107.8 was first reported on August 23rd 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-07-04 14:19:57 (13 hours ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/front-turn-signal-leds-for- ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/front-turn-signal-leds-for-2016-2019-toyota-prius-pair.html ua='Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15') show less	Web App Attack Exploited Host
🇫🇷 Sklurk	2026-07-04 08:13:22 (19 hours ago)	Web App Attack	Web App Attack
🇫🇷 bigorre.org	2026-07-04 06:41:41 (20 hours ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot
🇦🇺 MAGIC	2026-07-04 02:00:33 (1 day ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-07-03 07:36:14 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 15:03:12 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 35.168.107.8 (ec2-35-168-107-8.compute-1.amazon ... show more (mod_security) mod_security (id:210730) triggered by 35.168.107.8 (ec2-35-168-107-8.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 11:03:06.853809 2026] [security2:error] [pid 26251:tid 26251] [client 35.168.107.8:25667] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "akZ9qtBut5s9ClvVZvaRRgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-02 07:34:02 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 nodepile	2026-07-01 13:07:41 (3 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/morimoto/ram-1500-2019-xb-e ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/morimoto/ram-1500-2019-xb-evo-led-fog-lights.html ua='Mozilla/5.0 AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/605.1.15') show less	Web App Attack Exploited Host
🇫🇷 Sklurk	2026-06-30 14:58:29 (4 days ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 21:32:16 (5 days ago)	(mod_security) mod_security (id:240950) triggered by 35.168.107.8 (ec2-35-168-107-8.compute-1.amazon ... show more (mod_security) mod_security (id:240950) triggered by 35.168.107.8 (ec2-35-168-107-8.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 17:32:10.205922 2026] [security2:error] [pid 29253:tid 29253] [client 35.168.107.8:24213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|www.noelramos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.noelramos.com"] [uri "/wiki/index.php"] [unique_id "akLkWgSbABG_86Mb8MrHigAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-06-29 14:22:00 (5 days ago)	Web App Attack	Web App Attack
🇨🇦 polycoda	2026-06-29 12:18:49 (5 days ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇩🇪 EGP Abuse Dept	2026-06-29 01:51:01 (6 days ago)	Scraping webshop URLs (www.qusedpallets.com), likely botnet drone	Bad Web Bot Exploited Host
🇫🇷 Sklurk	2026-06-28 14:18:16 (6 days ago)	Web App Attack	Web App Attack
🇬🇧 Oakley	2026-06-28 06:02:59 (6 days ago)	(confirmed_bot_sig) Confirmed bot	Hacking

Showing 1 to 15 of 198 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 181.188.237.222

🇸🇬 178.128.51.84

🇮🇳 143.110.247.221

🇨🇳 124.160.173.22

🇲🇦 81.192.46.49

🇺🇸 66.150.198.186

🇺🇸 129.213.117.99

🇨🇳 118.196.129.25

🇻🇳 103.63.108.25

🇸🇪 83.226.181.38

🇩🇪 69.5.169.17

🇺🇸 34.123.134.194

🇰🇷 222.108.100.117

🇲🇽 187.191.48.23

🇮🇳 172.232.108.36

🇰🇷 158.180.79.132

🇵🇰 154.57.216.142

🇺🇸 147.185.132.76

🇨🇳 124.226.216.189

🇫🇷 85.217.140.53