JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.180.27.65

35.180.27.65 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 36%: ?

36%

ISP	Amazon Data Services France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-180-27-65.eu-west-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.180.27.65

Whois 35.180.27.65

IP Abuse Reports for 35.180.27.65:

This IP address has been reported a total of 6 times from 5 distinct sources. 35.180.27.65 was first reported on July 16th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-18 03:40:24 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.180.27.65 (ec2-35-180-27-65.eu-west-3.comput ... show more (mod_security) mod_security (id:210492) triggered by 35.180.27.65 (ec2-35-180-27-65.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 23:40:20.210879 2026] [security2:error] [pid 50488:tid 50488] [client 35.180.27.65:56006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosoctechnologies.com"] [uri "/.git/config"] [unique_id "alr1pFzl9sEUeAv_k1pTBAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-17 21:59:40 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-17	Web App Attack SSH Hacking
🇩🇪 updown.io	2026-07-17 20:44:53 (2 days ago)	{"level":"info","ts":1784321081.235063,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1784321081.235063,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.180.27.65","remote_port":"54956","client_ip":"35.180.27.65","proto":"HTTP/1.1","method":"GET","host":"status.headwayapp.co","uri":"/.env.development","headers":{"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["/"],"Connection":["keep-alive"],"Next-Action":["x"],"X-Nextjs-Request-Id":["937cb199"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"status.headwayapp.co","ech":false}},"bytes_read":0,"user_id":"","duration":0.000138905,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1784321081.245547,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.180.27.65","remote_port":"54 ... show less	DDoS Attack Web App Attack
🇺🇦 URAN Publishing Service	2026-07-17 05:30:47 (3 days ago)	35.180.27.65 - - [17/Jul/2026:08:30:40 +0300] "GET /.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows ... show more 35.180.27.65 - - [17/Jul/2026:08:30:40 +0300] "GET /.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.180.27.65 - - [17/Jul/2026:08:30:46 +0300] "GET /app/.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 02:02:01 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 35.180.27.65 (ec2-35-180-27-65.eu-west-3.comput ... show more (mod_security) mod_security (id:210492) triggered by 35.180.27.65 (ec2-35-180-27-65.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 22:01:54.218008 2026] [security2:error] [pid 6073:tid 6073] [client 35.180.27.65:59968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sponsorzilla.com"] [uri "/.git/config"] [unique_id "almNEl9XqCwBV5bZbcJb9wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 14:04:40 (3 days ago)	35.180.27.65 - - [16/Jul/2026:16:04:35 +0200] "GET /.git/config HTTP/1.1" 403 177 "-" "Mozilla/5.0 ( ... show more 35.180.27.65 - - [16/Jul/2026:16:04:35 +0200] "GET /.git/config HTTP/1.1" 403 177 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.153

🇬🇧 194.207.225.180

🇸🇬 194.5.82.116

🇧🇷 148.227.86.160

🇺🇸 143.42.1.71

🇧🇩 116.204.151.100

🇱🇰 111.223.179.4

🇺🇸 104.253.252.47

🇵🇰 103.249.115.49

🇫🇷 91.231.89.64

🇧🇬 79.124.56.138

🇦🇱 79.106.203.191

🇩🇪 69.5.169.8

🇺🇸 18.189.74.1

🇬🇧 213.166.84.61

🇺🇸 134.122.31.85

🇧🇩 114.130.156.46

🇫🇷 85.217.140.22

🇺🇸 3.83.245.221

🇸🇬 194.5.82.111