JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.92.176.138

35.92.176.138 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 77%: ?

77%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-92-176-138.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.92.176.138

Whois 35.92.176.138

IP Abuse Reports for 35.92.176.138:

This IP address has been reported a total of 16 times from 13 distinct sources. 35.92.176.138 was first reported on August 21st 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-08-24 16:50:01 (19 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
Anonymous	2026-08-24 15:43:26 (20 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-24 12:30:44 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 big-cloud.nl	2026-08-24 05:08:59 (1 day ago)	Try to access /.git/config	Web App Attack
🇫🇷 dynamix	2026-08-23 13:11:25 (1 day ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 04:00:56 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.92.176.138 (ec2-35-92-176-138.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.92.176.138 (ec2-35-92-176-138.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 00:00:51.838628 2026] [security2:error] [pid 1628:tid 1628] [client 35.92.176.138:43822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.justicehoward.com"] [uri "/.git/config"] [unique_id "aopwc4mA6r5rMnv_TPBjygAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-08-22 16:35:42 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-08-22 15:59:45 (2 days ago)	Excessive 404/403 errors	Brute-Force
🇧🇪 cmbplf	2026-08-22 15:41:15 (2 days ago)	2.778 requests with url.path *.env	Brute-Force Bad Web Bot
🇫🇷 Rom74	2026-08-22 07:18:40 (3 days ago)	[Sat Aug 22 09:18:36.816786 2026] [security2:error] [pid 169804:tid 123505223898816] [client 35.92.1 ... show more [Sat Aug 22 09:18:36.816786 2026] [security2:error] [pid 169804:tid 123505223898816] [client 35.92.176.138:0] [client 35.92.176.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.teslogiciels.com"] [uri "/"] [unique_id "aolNTIieMoI5hDyhPPB--wAAAFM"] [Sat Aug 22 09:18:36.983594 2026] [security2:error] [pid 169804:tid 123505894987456] [client 35.92.176.138:0] [client 35.92.176.138] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: ... show less	Web App Attack
🇮🇹 CoreTech srl	2026-08-22 00:38:57 (3 days ago)	cloudlinux2 fail2ban: 2026-08-22 02:34:01,008 fail2ban.actions [1480]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-22 02:34:01,008 fail2ban.actions [1480]: NOTICE [plesk-modsecurity] Unban 170.64.235.198cloudlinux2 fail2ban: 2026-08-22 02:34:53,324 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 62.238.125.138 - 2026-08-22 02:34:53cloudlinux2 fail2ban: 2026-08-22 02:35:00,197 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 170.64.207.239 - 2026-08-22 02:34:59cloudlinux2 fail2ban: 2026-08-22 02:34:59,251 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 170.64.207.239 - 2026-08-22 02:34:58cloudlinux2 fail2ban: 2026-08-22 02:35:43,466 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 161.35.63.23 - 2026-08-22 02:35:43cloudlinux2 fail2ban: 2026-08-22 02:35:43,860 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 161.35.63.23 - 2026-08-22 02:35:43cloudlinux2 fail2ban: 2026-08-22 02:37:54,553 fail2ban.filter [1480]: INFO [recidive] Found 35.92.176.138 - 2026-08-22 02:37:54cloudlinux2 fail2ban: 20 show less	Brute-Force
🇺🇸 mnsf	2026-08-22 00:05:12 (3 days ago)	Scanning/Probing (60)	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-21 22:03:45 (3 days ago)	Auto-ban: >3000 req/min op 2026-08-21	Web App Attack SSH Hacking
🇫🇷 dynamix	2026-08-21 19:31:10 (3 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 15:00:04 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 35.92.176.138 (ec2-35-92-176-138.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.92.176.138 (ec2-35-92-176-138.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 10:59:57.909707 2026] [security2:error] [pid 456:tid 475] [client 35.92.176.138:45234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.texas-plastic-surgeon.aafm.us"] [uri "/.git/config"] [unique_id "aohn7XXpE7XeLAX3LJyZowAAAQ4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.94

🇦🇷 186.128.238.43

🇫🇮 147.185.133.48

🇵🇭 120.29.88.109

🇱🇹 62.60.130.242

🇺🇸 51.81.170.7

🇺🇸 44.242.238.143

🇹🇼 198.235.24.46

🇳🇱 195.178.110.228

🇦🇷 186.128.182.203

🇳🇱 185.223.235.2

🇨🇳 182.45.108.144

🇮🇩 163.7.8.79

🇺🇸 97.74.236.4

🇺🇸 91.230.168.124

🇺🇸 67.83.157.171

🇰🇷 61.80.78.57

🇺🇸 52.167.144.160

🇸🇬 47.237.87.116

🇸🇬 47.128.39.66