JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.180.113.60

35.180.113.60 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 84%: ?

84%

ISP	Amazon Data Services France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-180-113-60.eu-west-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.180.113.60

Whois 35.180.113.60

IP Abuse Reports for 35.180.113.60:

This IP address has been reported a total of 75 times from 43 distinct sources. 35.180.113.60 was first reported on September 2nd 2025, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Scan	2026-06-18 00:29:27 (6 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇹🇷 Domainhizmetleri.com	2026-06-18 00:25:00 (6 hours ago)	[honeypot] - MS-SQL-PROBE	Port Scan Hacking
🇩🇪 ghostwarriors	2026-06-18 00:20:11 (6 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇹🇼 kk_it_man	2026-06-18 00:03:02 (6 hours ago)	ET INFO Request to Hidden Environment File - Inbound ET WEB_SERVER Likely Malicious Request for /p ... show more ET INFO Request to Hidden Environment File - Inbound ET WEB_SERVER Likely Malicious Request for /proc/self/environ ET WEB_SERVER WEB-PHP phpinfo access GPL WEB_SERVER .htpasswd access show less	Port Scan
🇩🇪 mattk	2026-06-17 23:46:01 (6 hours ago)	port scan	Port Scan
🇦🇺 Lazarus	2026-06-17 23:41:16 (6 hours ago)	HTTP probe.	Bad Web Bot
🇩🇪 grassau.com	2026-06-17 23:38:40 (6 hours ago)	Port Scan detected from 35.180.113.60 (FR/France/Paris Department/Paris/ec2-35-180-113-60.eu-west- ... show more Port Scan detected from 35.180.113.60 (FR/France/Paris Department/Paris/ec2-35-180-113-60.eu-west-3.compute.amazonaws.com). show less	Port Scan
🇩🇪 Hugopvigo	2026-06-17 23:37:53 (6 hours ago)	travel.suop.es:80 35.180.113.60 - - [18/Jun/2026:01:37:52 +0200] "GET /.git/config HTTP/1.1" 301 555 ... show more travel.suop.es:80 35.180.113.60 - - [18/Jun/2026:01:37:52 +0200] "GET /.git/config HTTP/1.1" 301 555 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 TPI-Abuse	2026-06-17 23:30:47 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.180.113.60 (ec2-35-180-113-60.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.180.113.60 (ec2-35-180-113-60.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 19:30:44.546719 2026] [security2:error] [pid 29605:tid 29605] [client 35.180.113.60:36082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.247"] [uri "/.git/HEAD"] [unique_id "ajMuJHS-9y9Rpeozo0Ay-wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 WinnieHoneypots	2026-06-17 23:23:34 (7 hours ago)	Probe hitting /.git/HEAD detected. Whatcha lookin for in there?!	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 23:10:12 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.180.113.60 (ec2-35-180-113-60.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.180.113.60 (ec2-35-180-113-60.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 19:10:06.982948 2026] [security2:error] [pid 32528:tid 32528] [client 35.180.113.60:39036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.147"] [uri "/.git/HEAD"] [unique_id "ajMpTknaZ9NmTVFlEfk0mwAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-17 23:09:43 (7 hours ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 eber965	2026-06-17 23:01:56 (7 hours ago)	[Wed Jun 17 19:01:54 2026] [authz_core:error] [pid 254528:tid 140065502119680] [client 35.180.113.60 ... show more [Wed Jun 17 19:01:54 2026] [authz_core:error] [pid 254528:tid 140065502119680] [client 35.180.113.60:51282] AH01630: client denied by server configuration: /var/www/html/.git [Wed Jun 17 19:01:54 2026] [authz_core:error] [pid 254525:tid 140065871832832] [client 35.180.113.60:51296] AH01630: client denied by server configuration: /var/www/html/.git [Wed Jun 17 19:01:54 2026] [authz_core:error] [pid 254528:tid 140065359509248] [client 35.180.113.60:51308] AH01630: client denied by server configuration: /var/www/html/.git [Wed Jun 17 19:01:55 2026] [authz_core:error] [pid 254528:tid 140065888618240] [client 35.180.113.60:51314] AH01630: client denied by server configuration: /var/www/html/.git [Wed Jun 17 19:01:55 2026] [authz_core:error] [pid 254528:tid 140064545810176] [client 35.180.113.60:51328] AH01630: client denied by server configuration: /var/www/html/.git ... show less	Brute-Force
🇺🇸 jfz-abuse	2026-06-17 22:54:43 (7 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 Mainpine	2026-06-17 22:32:40 (8 hours ago)	[Wed Jun 17 22:32:37.117199 2026] [proxy_fcgi:error] [pid 3354068:tid 3354165] [client 35.180.113.60 ... show more [Wed Jun 17 22:32:37.117199 2026] [proxy_fcgi:error] [pid 3354068:tid 3354165] [client 35.180.113.60:40700] AH01071: Got error 'Primary script unknown' [Wed Jun 17 22:32:38.718880 2026] [proxy_fcgi:error] [pid 3354071:tid 3354226] [client 35.180.113.60:40760] AH01071: Got error 'Primary script unknown' [Wed Jun 17 22:32:38.988515 2026] [proxy_fcgi:error] [pid 3354068:tid 3354221] [client 35.180.113.60:40766] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 198.244.168.56

🇷🇴 194.102.73.93

🇮🇳 182.95.185.158

🇺🇸 172.239.51.96

🇷🇴 141.98.83.240

🇮🇩 108.137.132.87

🇳🇱 91.92.42.28

🇺🇸 199.15.227.86

🇹🇼 198.235.24.47

🇵🇭 180.191.169.177

🇺🇸 172.253.1.26

🇺🇸 170.231.251.158

🇧🇩 61.247.176.110

🇺🇸 52.176.211.73

🇳🇱 45.148.10.183

🇸🇬 45.78.204.254

🇫🇮 37.27.59.165

🇫🇮 2a00:1450:4010:c0a::120

🇮🇳 2404:6800:4000:1001::126

🇺🇸 2001:470:1:c84::2d0