JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.180.130.203

35.180.130.203 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 46%: ?

46%

ISP	Amazon Data Services France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-180-130-203.eu-west-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.180.130.203

Whois 35.180.130.203

IP Abuse Reports for 35.180.130.203:

This IP address has been reported a total of 10 times from 7 distinct sources. 35.180.130.203 was first reported on July 16th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MatCat	2026-07-18 09:35:17 (1 day ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇩🇪 big-cloud.nl	2026-07-18 07:41:04 (1 day ago)	Try to access /.git/config	Web App Attack
🇩🇪 on-com	2026-07-18 04:42:43 (1 day ago)	URL scan	Brute-Force Web App Attack
🇳🇱 Savvii	2026-07-18 01:30:29 (1 day ago)	46 attempts against mh-misbehave-ban on tin	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 06:49:24 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.180.130.203 (ec2-35-180-130-203.eu-west-3.co ... show more (mod_security) mod_security (id:210492) triggered by 35.180.130.203 (ec2-35-180-130-203.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 02:49:20.813250 2026] [security2:error] [pid 31895:tid 31895] [client 35.180.130.203:56950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mcgmcg.com.coolingsprings.org"] [uri "/.git/config"] [unique_id "alnQcC7BvioZkAibUqJJfwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 06:28:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.180.130.203 (ec2-35-180-130-203.eu-west-3.co ... show more (mod_security) mod_security (id:210492) triggered by 35.180.130.203 (ec2-35-180-130-203.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 02:28:54.935586 2026] [security2:error] [pid 367686:tid 367686] [client 35.180.130.203:51046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mcfdemos.kmelson.com"] [uri "/.git/config"] [unique_id "alnLpl5fLnSUnSjuKBEOogAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 05:53:38 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.180.130.203 (ec2-35-180-130-203.eu-west-3.co ... show more (mod_security) mod_security (id:210492) triggered by 35.180.130.203 (ec2-35-180-130-203.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:53:31.380139 2026] [security2:error] [pid 9496:tid 9496] [client 35.180.130.203:46158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mcdonaldmooreshootingsports.effectivefirearms.com"] [uri "/.git/config"] [unique_id "alnDW9qVOBRn-71vHhkwvgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 01:05:28 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.180.130.203 (ec2-35-180-130-203.eu-west-3.co ... show more (mod_security) mod_security (id:210492) triggered by 35.180.130.203 (ec2-35-180-130-203.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 21:05:24.457687 2026] [security2:error] [pid 47863:tid 47863] [client 35.180.130.203:32942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mbehel.jen-eric.com"] [uri "/.git/config"] [unique_id "all_1BVgK3kA0YkFAMh3aAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-07-16 23:35:05 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-16 22:05:59 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-16	Web App Attack SSH Hacking

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:a6c2:292d::41a:33

🇺🇸 2a09:bac5:6368:2da5::48c:4b

🇺🇸 2a09:bac5:6368:183c::26a:e2

🇺🇸 2a09:bac1:76c0:480::501:79

🇪🇸 188.95.113.76

🇲🇽 177.249.174.187

🇱🇹 77.90.185.20

🇨🇳 47.93.192.43

🇮🇳 27.4.194.108

🇩🇪 2a0e:7b85:f11e:7da0:fd61:ed0d:94de:b3f6

🇩🇪 2a0e:7b85:b4fc:c639:5518:b440:40a2:8a07

🇩🇪 2a0e:7b85:b351:495a:7448:62bc:8669:3d83

🇩🇪 2a0e:7b85:69b:13f0:51f6:4676:5f9e:b5e5

🇩🇪 2a0e:7b84:2d8e:7de2:69e9:a174:3738:d10c

🇩🇪 2a0e:7b84:1665:48e5:2c9f:d75a:b214:cd1c

🇺🇸 2a09:bac5:a725:1973::289:66

🇺🇸 2a09:bac5:636f:294b::41d:1

🇺🇸 2a09:bac1:76c0:480::501:58

🇺🇸 2a09:bac1:76a0:3d0::48c:20

🇨🇳 222.189.99.205