JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.180.42.152

35.180.42.152 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 28%: ?

28%

ISP	Amazon Data Services France
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-180-42-152.eu-west-3.compute.amazonaws.com
Domain Name	amazon.com
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.180.42.152

Whois 35.180.42.152

IP Abuse Reports for 35.180.42.152:

This IP address has been reported a total of 13 times from 10 distinct sources. 35.180.42.152 was first reported on July 26th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=632; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.en ... show more Apache probe; attempts=632; exact paths: /.env \| /.env.backup \| /.env.backup1 \| /.env.backup2 \| /.env.bak \| /.env.ci \| /.env.dev \| /.env.development \| /.env.dist \| /.env.docker \| /.env.example \| /.env.fly \| /.env.json \| /.env.live \| /.env.local \| /.env.neon \| /.env.old \| /.env.preprod \| /.env.prod \| /.env.production \| /.env.railway \| /.env.remote \| /.env.render \| /.env.sample \| /.env.save \| /.env.stage \| /.env.staging \| /.env.supabase \| /.env.swp \| /.env.test \| /.env.txt \| /.env.uat \| /.env.vault \| /.env.vercel \| /.env.yaml \| /.env.yml \| /.env~ \| /.git/.env \| /.git/config \| /actions/.env \| /admin-panel/.env \| /admin/.env \| /administrator/.env \| /angular/.env \| /ansible/.env \| /api/.env \| /api/dev/.env \| /api/staging/.env \| /api/v1/.env \| /api/v2/.env \| /api/v3/.env \| /app/.env \| /application/.env \| /apps/.env \| /assets/.env \| /aws/.env \| /azure/.env \| /backend/.env \| /backup/.env \| /backups/.env \| /beta/.env \| ... [211 exact paths total] show less	Web App Attack
🇬🇧 consul.to	2026-07-28 09:49:09 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇷🇺 themrdogs	2026-07-28 08:00:23 (1 month ago)	$f2bV_matches	Brute-Force Web App Attack
🇺🇸 WizardsToolkit	2026-07-27 22:11:30 (1 month ago)	tried to access server backup files	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 19:56:45 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 35.180.42.152 (ec2-35-180-42-152.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.180.42.152 (ec2-35-180-42-152.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 15:56:37.825064 2026] [security2:error] [pid 960405:tid 960405] [client 35.180.42.152:54260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jonathan.mathewyoung.com"] [uri "/.git/config"] [unique_id "ame39eCt9FgWlTTyd5jFJQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 12:23:50 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 35.180.42.152 (ec2-35-180-42-152.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.180.42.152 (ec2-35-180-42-152.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:23:44.602875 2026] [security2:error] [pid 1364237:tid 1364237] [client 35.180.42.152:38554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.johnhansonmemorial.org.coolingsprings.org"] [uri "/.git/config"] [unique_id "amdN0DN4HF32UKeX8YfJKAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:28:50 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 35.180.42.152 (ec2-35-180-42-152.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.180.42.152 (ec2-35-180-42-152.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:28:46.069353 2026] [security2:error] [pid 1062690:tid 1062690] [client 35.180.42.152:55522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.johnatuttle.com.player-care.com"] [uri "/.git/config"] [unique_id "amdA7q2fxz5F_unaQgIzGwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 zynex	2026-07-26 23:26:19 (1 month ago)	URL Probing: /public/.env	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-26 22:00:13 (1 month ago)	Auto-ban: >3000 req/min op 2026-07-26	Web App Attack SSH Hacking
🇩🇪 Bedios GmbH	2026-07-26 08:22:58 (1 month ago)	Login credentials theft attempt	Hacking
🇩🇪 big-cloud.nl	2026-07-26 05:36:24 (1 month ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 04:22:20 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 35.180.42.152 (ec2-35-180-42-152.eu-west-3.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.180.42.152 (ec2-35-180-42-152.eu-west-3.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 00:22:16.128270 2026] [security2:error] [pid 3732944:tid 3732944] [client 35.180.42.152:49974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.klfreeman.athome360.com"] [uri "/.git/config"] [unique_id "amWLeC9g6PMpOY2Qr7aK2QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-07-26 04:05:35 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.104.161.142

🇲🇾 47.250.93.74

🇺🇸 34.125.144.181

🇨🇳 219.151.157.110

🇸🇾 178.253.95.167

🇺🇸 172.206.228.64

🇩🇪 104.23.239.89

🇹🇼 34.80.162.14

🇺🇸 13.86.104.164

🇮🇳 111.92.126.95

🇳🇱 34.6.122.183

🇰🇿 31.132.90.3

🇪🇨 179.0.43.14

🇺🇸 70.169.12.229

🇺🇸 66.132.224.232

🇺🇸 64.225.30.2

🇬🇧 51.195.149.120

🇺🇸 18.234.252.134

🇰🇷 3.36.42.206

🇺🇸 212.119.41.197