JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.183.104.215

35.183.104.215 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 61%: ?

61%

ISP	Amazon Data Services Canada
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-183-104-215.ca-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.183.104.215

Whois 35.183.104.215

IP Abuse Reports for 35.183.104.215:

This IP address has been reported a total of 14 times from 10 distinct sources. 35.183.104.215 was first reported on June 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-18 05:38:04 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.183.104.215 (ec2-35-183-104-215.ca-central-1 ... show more (mod_security) mod_security (id:210492) triggered by 35.183.104.215 (ec2-35-183-104-215.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 01:37:59.099795 2026] [security2:error] [pid 8302:tid 8302] [client 35.183.104.215:40674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunshine-trust.com"] [uri "/.git/config"] [unique_id "alsRN1p92coPFZkJeYzYlAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-18 04:08:24 (1 day ago)	Scanning/Probing (13)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 19:59:48 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.183.104.215 (ec2-35-183-104-215.ca-central-1 ... show more (mod_security) mod_security (id:210492) triggered by 35.183.104.215 (ec2-35-183-104-215.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 15:59:43.490827 2026] [security2:error] [pid 1474003:tid 1474017] [client 35.183.104.215:45860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "royalfellows.com.aafm.us"] [uri "/.git/config"] [unique_id "alqJrzFb1FEbblHNVqHqDAAAAQg"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 nekopavel	2026-07-17 04:46:36 (2 days ago)	35.183.104.215 - - [17/Jul/2026:06:46:34 +0200]"GET /.git/config HTTP/1.1" 404 530"-" uwu.so "Mozill ... show more 35.183.104.215 - - [17/Jul/2026:06:46:34 +0200]"GET /.git/config HTTP/1.1" 404 530"-" uwu.so "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.012" "0.000""Montreal" "CA" 35.183.104.215 - - [17/Jul/2026:06:46:35 +0200]"GET /.env HTTP/1.1" 404 530"-" uwu.so "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.006" "0.000""Montreal" "CA" 35.183.104.215 - - [17/Jul/2026:06:46:35 +0200]"GET /.env.local HTTP/1.1" 404 530"-" uwu.so "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.006" "0.000""Montreal" "CA" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-17 04:39:43 (2 days ago)	35.183.104.215 - - [17/Jul/2026:07:39:33 +0300] "GET /.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (X11; ... show more 35.183.104.215 - - [17/Jul/2026:07:39:33 +0300] "GET /.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.183.104.215 - - [17/Jul/2026:07:39:43 +0300] "GET /app/.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 04:34:15 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.183.104.215 (ec2-35-183-104-215.ca-central-1 ... show more (mod_security) mod_security (id:210492) triggered by 35.183.104.215 (ec2-35-183-104-215.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:34:11.988845 2026] [security2:error] [pid 255895:tid 255895] [client 35.183.104.215:41682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uwsdiving.com"] [uri "/.git/config"] [unique_id "almwww0eBOAWcYxuH11PGAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-07-17 00:50:06 (2 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇹 VHosting	2026-07-16 19:10:03 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 todix	2026-07-16 17:04:20 (2 days ago)	Web App Attack Exploid from 35.183.104.215	Web App Attack
Anonymous	2026-07-16 16:32:05 (2 days ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇩🇪 ghostwarriors	2026-07-06 08:57:12 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-07-03 02:22:37 (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-06-23 21:10:19 (3 weeks ago)	Try to access /.git/config	Web App Attack
🇩🇪 ghostwarriors	2026-06-23 20:20:09 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.76.43.24

🇮🇳 117.203.222.16

🇨🇳 222.92.61.242

🇰🇷 220.116.26.179

🇨🇳 218.13.26.42

🇪🇹 196.190.41.137

🇨🇳 182.119.228.157

🇮🇳 180.188.231.56

🇳🇱 91.92.241.196

🇨🇳 60.166.82.178

🇺🇸 34.26.77.105

🇷🇺 31.173.4.22

🇺🇸 165.154.173.104

🇯🇵 160.248.75.84

🇺🇸 92.119.36.8

🇺🇸 64.62.156.165

🇧🇷 45.235.110.14

🇮🇩 36.93.249.106

🇺🇸 35.184.93.174

🇺🇦 31.43.49.144