AbuseIPDB » 35.85.217.48

35.85.217.48 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 42%: ?

42%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-85-217-48.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 35.85.217.48

Whois 35.85.217.48

IP Abuse Reports for 35.85.217.48:

This IP address has been reported a total of 46 times from 31 distinct sources. 35.85.217.48 was first reported on February 7th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Vegascosmetics	2025-02-11 22:51:31 (1 month ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
octageeks.com	2025-02-11 05:06:43 (1 month ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
Vegascosmetics	2025-02-10 22:51:38 (1 month ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
rtbh.com.tr	2025-02-10 20:49:58 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-02-10 12:59:03 (1 month ago)	wordpress-trap	Web App Attack
NXTwoThou	2025-02-10 04:21:11 (1 month ago)	/wp-includes/wlwmanifest.xml	Web App Attack
pusathosting.com	2025-02-10 01:39:03 (1 month ago)	2ds22 bruteforce	Brute-Force Web App Attack
rtbh.com.tr	2025-02-09 20:50:01 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
quicksand	2025-02-09 20:37:39 (1 month ago)	Malicious URI path & Amazon AWS User Agent Spoofing [GET /virtual/capture/gm4my/xmlrpc.php?rsd] [Moz ... show moreMalicious URI path & Amazon AWS User Agent Spoofing [GET /virtual/capture/gm4my/xmlrpc.php?rsd] [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36] show less	Bad Web Bot Web App Attack
systemdan	2025-02-09 19:28:00 (1 month ago)	WP Attack [2025-02-09 19:28:11] 35.85.217.48 - GET /wp-includes/wlwmanifest.xml ... show moreWP Attack [2025-02-09 19:28:11] 35.85.217.48 - GET /wp-includes/wlwmanifest.xml [2025-02-09 19:28:11] 35.85.217.48 - GET /xmlrpc.php?rsd [2025-02-09 19:28:11] 35.85.217.48 - GET / [2025-02-09 19:28:12] 35.85.217.48 - GET /blog/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /web/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /wordpress/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /website/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /wp/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /news/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /2018/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /2019/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /shop/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /wp1/wp-includes/wlwmanifest.xml [2025-02-09 19:28:12] 35.85.217.48 - GET /test/wp-includes/wlwmanifest.xml show less	Web App Attack
Anonymous	2025-02-09 15:20:02 (1 month ago)	wordpress-trap	Web App Attack
openstrike.co.uk	2025-02-09 06:12:37 (1 month ago)	36 attacks on Wordpress URLs, PHP URLs: GET /domain.cgi?id=264/sito/wp-includes/wlwmanifest.xm ... show more36 attacks on Wordpress URLs, PHP URLs: GET /domain.cgi?id=264/sito/wp-includes/wlwmanifest.xml HTTP/1.1 GET /domain.cgi?id=264/xmlrpc.php?rsd HTTP/1.1 show less	Web App Attack
octageeks.com	2025-02-09 05:06:07 (1 month ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
Anonymous	2025-02-09 02:32:55 (1 month ago)	(WPLOGIN) WP Login Attack 35.85.217.48 (US/United States/ec2-35-85-217-48.us-west-2.compute.amazonaw ... show more(WPLOGIN) WP Login Attack 35.85.217.48 (US/United States/ec2-35-85-217-48.us-west-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: 1 show less	Brute-Force SSH
todix	2025-02-09 01:16:33 (1 month ago)	WebAttack or semilar from 35.85.217.48	Web App Attack