JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.88.149.235

35.88.149.235 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 0%: ?

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-88-149-235.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.88.149.235

Whois 35.88.149.235

IP Abuse Reports for 35.88.149.235:

This IP address has been reported a total of 38 times from 23 distinct sources. 35.88.149.235 was first reported on December 13th 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-12-15 20:10:28 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 [email protected]	2025-12-15 00:58:32 (6 months ago)	...	Brute-Force SSH
🇫🇷 SpaceHost-Server	2025-12-14 23:42:46 (6 months ago)		Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-14 22:59:46 (6 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-12-13. show less	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-12-14 20:10:27 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 macrob	2025-12-14 08:41:04 (6 months ago)	2025/12/14 08:40:34 [error] 422786#422786: 165668116 access forbidden by rule, client: 35.88.149.23 ... show more 2025/12/14 08:40:34 [error] 422786#422786: 165668116 access forbidden by rule, client: 35.88.149.235, server: finami.es, request: "GET /.env HTTP/2.0", host: "finami.es" 2025/12/14 08:40:56 [error] 422781#422781: 165668236 access forbidden by rule, client: 35.88.149.235, server: finami.es, request: "GET /.env.production HTTP/2.0", host: "finami.es" 2025/12/14 08:41:03 [error] 422784#422784: 165668078 access forbidden by rule, client: 35.88.149.235, server: finami.es, request: "GET /.env.prod HTTP/2.0", host: "finami.es" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-14 07:32:47 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 02:32:43.070747 2025] [security2:error] [pid 12758:tid 12758] [client 35.88.149.235:54478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fancyspider.net"] [uri "/.env"] [unique_id "aT5oGwrqQmT684rq6bn_rAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-14 06:55:12 (6 months ago)	SuspiciousC2 Activity detected by FMBAD System 2025-12-14 09:55:12	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-14 06:16:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 01:16:14.360240 2025] [security2:error] [pid 25960:tid 25960] [client 35.88.149.235:35762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evolutionmedical.help"] [uri "/.env.secrets"] [unique_id "aT5WLnuCqhwyubOrE8YFQwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-14 05:28:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 00:28:44.343602 2025] [security2:error] [pid 19967:tid 19977] [client 35.88.149.235:43144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "e.rwabutaza.com"] [uri "/.env"] [unique_id "aT5LDOJdu1tuwH8It0m77gAAAMg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-14 05:11:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 00:11:49.302832 2025] [security2:error] [pid 32755:tid 313] [client 35.88.149.235:60842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ep-dh.com"] [uri "/.git/config"] [unique_id "aT5HFeYB6XDe7uwmgN5nGgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2025-12-14 04:50:57 (6 months ago)	(modsecurity) srv104 ModSecurity 35.88.149.235 (US/United States/ec2-35-88-149-235.us-west-2.compute ... show more (modsecurity) srv104 ModSecurity 35.88.149.235 (US/United States/ec2-35-88-149-235.us-west-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇨🇦 polycoda	2025-12-14 04:42:03 (6 months ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-14 04:37:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.88.149.235 (ec2-35-88-149-235.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 23:37:43.497405 2025] [security2:error] [pid 28762:tid 28762] [client 35.88.149.235:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "english.cloudex.click"] [uri "/.git/config"] [unique_id "aT4_FwhI4_8jKLg19bYJggAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2025-12-14 03:46:22 (6 months ago)	Port Scan detected from 35.88.149.235 (US/United States/ec2-35-88-149-235.us-west-2.compute.amazon ... show more Port Scan detected from 35.88.149.235 (US/United States/ec2-35-88-149-235.us-west-2.compute.amazonaws.com). show less	Port Scan

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:9e96:4001

🇬🇧 209.97.180.8

🇳🇱 176.65.139.235

🇺🇸 66.132.186.225

🇧🇷 205.210.31.166

🇺🇸 147.185.132.90

🇷🇺 85.173.96.230

🇺🇸 66.175.239.44

🇭🇰 162.211.181.66

🇺🇸 66.132.172.135

🇿🇼 41.174.67.128

🇨🇳 36.132.129.194

🇫🇷 185.177.72.70

🇺🇸 172.212.174.123

🇺🇸 144.172.103.103

🇺🇸 137.27.32.70

🇨🇳 120.46.184.6

🇸🇬 103.250.11.176

🇷🇴 2.57.122.238

🇺🇸 2604:a880:400:d1:0:4:9e8c:c001