35.94.100.91

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
52% Elevated
64 reports
45 reporters · latest 1 week ago
ISP
Amazon.com, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-35-94-100-91.us-west-2.compute.amazonaws.com
Domain Name
amazon.com
Country
🇺🇸 United States of America
City
Boardman, Oregon
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
64 from 45 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 26 🇺🇸 United States of America 13 🇫🇷 France 6
Most common categories Port Scan 41 Hacking 13 Web App Attack 11 Brute-Force 8 Bad Web Bot 8
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 micropedro
4 incidents: malicious activity. First: 2026-10-28 06:39, Last: 2026-10-30 08:25 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
4 incidents: malicious activity. First: 2026-10-20 19:36, Last: 2026-10-23 08:11 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
4 incidents: malicious activity. First: 2026-10-02 11:28, Last: 2026-10-16 11:54 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
6 incidents: malicious activity. First: 2026-09-24 10:15, Last: 2026-09-29 19:18 UTC. Triggers: unknown.
Port Scan
🇩🇪 klaus_ph
2026-09-27 05:41:56,246 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 35.94.100.91 ...
Bad Web Bot
🇩🇪 David Ferneding
Blocked by UFW (TCP on 2443) Source port: 53058 TTL: 121 Packet length: 60 TOS: 0x00 This report (for 35.94.100.91) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 klaus_ph
2026-09-27 01:18:27,972 fail2ban.actions [8144]: NOTICE [ipblocklist] Ban 35.94.100.91 ...
Bad Web Bot
🇺🇸 Epimetheus
Unauthorized access attempts: [GET] /login_up.php UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)
Web App Attack
🇷🇺 dnsbd.tech
nftables | Proto: TCP | Port: 2443 | Port scan
Port Scan Hacking
🇬🇧 KTSTechnology
Repeated connection attempts to firewalled ports, detected by our ISP firewall
Port Scan
🇩🇪 XYCoderXY
SSH/web brute-force & exploit scanning against lumerux.com (automated report).
Brute-Force SSH
🇩🇪 eposs-it.de
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=2083
Port Scan Hacking
🇩🇪 eposs-it.de
Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=2083
Port Scan Hacking
🇺🇸 sandra361
Port scan detected: 5 attempts across 1 port (1500). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=35.94.100.91 LEN=40 TOS=0x00 PREC=0x00 TTL=118 ID=22271 DF PROTO=TCP SPT=46834 DPT=1500 WINDOW=62727 RES=0x00 ACK FIN URGP=0
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 190.65.61.112
🇧🇷 189.89.22.3
🇲🇽 187.250.130.227
🇺🇸 162.216.149.197
🇵🇰 151.123.254.183
🇮🇱 130.185.102.59
🇹🇭 119.59.116.247
🇳🇬 102.88.167.179
🇨🇲 41.205.88.70
🇧🇪 34.52.234.95
🇺🇸 24.125.175.154
🇳🇴 195.139.124.79
🇺🇦 194.44.23.226
🇺🇸 185.61.218.181
🇷🇺 91.212.137.50
🇬🇧 86.142.50.189
🇸🇦 51.39.128.173
🇺🇸 45.156.129.113
🇺🇸 43.135.186.145
🇲🇦 41.248.212.129
feedback