JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.180.159.129

35.180.159.129 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 50%: ?

50%

ISP	Amazon Data Services France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-180-159-129.eu-west-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.180.159.129

Whois 35.180.159.129

IP Abuse Reports for 35.180.159.129:

This IP address has been reported a total of 12 times from 9 distinct sources. 35.180.159.129 was first reported on June 2nd 2023, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-16 08:00:28 (6 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 05:15:27 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.180.159.129 (ec2-35-180-159-129.eu-west-3.co ... show more (mod_security) mod_security (id:210492) triggered by 35.180.159.129 (ec2-35-180-159-129.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 01:15:16.081202 2026] [security2:error] [pid 21274:tid 21274] [client 35.180.159.129:51988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vitalitywebb.com.backstore.com"] [uri "/.git/config"] [unique_id "alho5HlgPm4TLcm26PLrAQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 04:49:38 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.180.159.129 (ec2-35-180-159-129.eu-west-3.co ... show more (mod_security) mod_security (id:210492) triggered by 35.180.159.129 (ec2-35-180-159-129.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 00:49:33.740535 2026] [security2:error] [pid 28641:tid 28641] [client 35.180.159.129:60104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sionayra.tracybur.net"] [uri "/.git/config"] [unique_id "alhi3bW5ESWW53NvCSBLFwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 01:46:37 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.180.159.129 (ec2-35-180-159-129.eu-west-3.co ... show more (mod_security) mod_security (id:210492) triggered by 35.180.159.129 (ec2-35-180-159-129.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:46:33.607756 2026] [security2:error] [pid 11953:tid 11953] [client 35.180.159.129:42208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.visitors.oxfordgliding.com"] [uri "/.git/config"] [unique_id "alg3-V41zIPoRxFn13y-dgAAADI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-07-16 01:44:07 (12 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-07-16 01:08:36 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.180.159.129 (ec2-35-180-159-129.eu-west-3.co ... show more (mod_security) mod_security (id:210492) triggered by 35.180.159.129 (ec2-35-180-159-129.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:08:31.767314 2026] [security2:error] [pid 7386:tid 7386] [client 35.180.159.129:35768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.visitcampbellford.modeltdr.com"] [uri "/.git/config"] [unique_id "algvDwa0HvWKszp8SNgSbQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-07-15 23:26:12 (15 hours ago)	1.918 requests with url.path .env 336 requests with url.path phpinfo.php	Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-07-15 20:19:54 (18 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 VHosting	2026-07-15 19:10:02 (19 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-07-15 14:06:26 (1 day ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41	Port Scan
🇦🇺 oncord	2023-07-28 13:25:58 (2 years ago)	Form spam	Web Spam
🇫🇷 bigorre.org	2023-06-02 18:34:37 (3 years ago)	Excessive crawling : exceed crawl-delay defined in robots.txt	Bad Web Bot

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇨 181.199.54.42

🇭🇰 152.32.131.77

🇵🇰 139.135.43.155

🇺🇸 137.184.40.217

🇺🇸 104.23.190.121

🇩🇪 69.5.169.215

🇺🇸 66.132.172.111

🇺🇸 44.128.248.199

🇩🇪 217.181.94.169

🇻🇳 203.162.43.94

🇧🇲 199.172.203.162

🇪🇨 181.175.225.241

🇵🇱 176.53.159.198

🇫🇮 172.217.37.154

🇮🇩 163.7.4.169

🇺🇸 147.185.132.205

🇺🇸 66.132.186.254

🇰🇷 61.76.112.4

🇭🇰 47.76.95.53

🇺🇸 44.35.32.171