JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.94.104.237

35.94.104.237 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 99%: ?

99%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-94-104-237.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.94.104.237

Whois 35.94.104.237

IP Abuse Reports for 35.94.104.237:

This IP address has been reported a total of 17 times from 17 distinct sources. 35.94.104.237 was first reported on October 21st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 sthoyer.de	2026-10-22 16:46:15 (3 hours ago)	Oct 22 18:45:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Oct 22 18:45:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=35.94.104.237 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=40014 DF PROTO=TCP SPT=42350 DPT=2443 WINDOW=62727 RES=0x00 SYN URGP=0 Oct 22 18:45:59 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=35.94.104.237 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=40015 DF PROTO=TCP SPT=42350 DPT=2443 WINDOW=62727 RES=0x00 SYN URGP=0 Oct 22 18:46:01 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=35.94.104.237 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=40016 DF PROTO=TCP SPT=42350 DPT=2443 WINDOW=62727 RES=0x00 SYN URGP=0 Oct 22 18:46:06 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=35.94.104.237 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=119 ID=40017 DF PROTO=TCP SPT=42350 DPT=2443 WI ... show less	Port Scan
🇩🇪 LRob	2026-10-22 12:36:15 (8 hours ago)	Vulnerability scanning \| host: webmail.garage-beziers.fr \| method: GET \| path: /enhancecp \| ua: Mozi ... show more Vulnerability scanning \| host: webmail.garage-beziers.fr \| method: GET \| path: /enhancecp \| ua: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) \| src_port: 60378 show less	Port Scan Web App Attack
🇩🇪 Jochen Pretli	2026-10-22 11:57:26 (8 hours ago)	connection to honeypot	Email Spam Port Scan
🇫🇷 GabrielJST	2026-10-22 08:32:04 (12 hours ago)	Port Scan detected from 35.94.104.237 (US/United States/ec2-35-94-104-237.us-west-2.compute.amazon ... show more Port Scan detected from 35.94.104.237 (US/United States/ec2-35-94-104-237.us-west-2.compute.amazonaws.com). show less	Port Scan
🇩🇪 jbcrn	2026-10-22 02:09:34 (18 hours ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Other, ruleset: ai.robots.txt. Requeste ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Other, ruleset: ai.robots.txt. Requested honeypot path: /robots.txt. User-Agent: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) show less	Bad Web Bot Web App Attack
🇺🇸 sumnone	2026-10-22 01:22:19 (19 hours ago)	Port probing on unauthorized port 8090	Port Scan Hacking Exploited Host
🇷🇴 DamonOne	2026-10-22 00:41:21 (20 hours ago)	Blocked by OPNsense; 5 hits, proto=tcp, ports=8083	Port Scan Hacking
🇩🇰 ScamAware	2026-10-22 00:21:49 (20 hours ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇩🇪 iNetWorker	2026-10-21 21:00:17 (23 hours ago)	firewall-block, port(s): 10000/tcp	Port Scan
🇫🇷 dusfor72	2026-10-21 20:57:59 (23 hours ago)	aggressive portscan ...	Port Scan
🇳🇱 376yqrz3a	2026-10-21 20:55:01 (23 hours ago)	Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=10000	Port Scan Hacking
🇮🇹 Inartis	2026-10-21 20:32:05 (1 day ago)	35.94.104.237 - - [21/Oct/2026:21:55:31 +0200] "GET /enhancecp HTTP/1.1" 404 192190 "-" "Mozilla/5.0 ... show more 35.94.104.237 - - [21/Oct/2026:21:55:31 +0200] "GET /enhancecp HTTP/1.1" 404 192190 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 35.94.104.237 - - [21/Oct/2026:22:32:03 +0200] "GET /enhancecp HTTP/1.1" 200 56597 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-21 20:14:08 (1 day ago)	[TCP/8443] Unsolicited connection attempt on a port with no legitimate public service.	Port Scan Hacking
🇩🇪 psauxit	2026-10-21 19:56:10 (1 day ago)	Fail2Ban - UFW port probing on unauthorized port	Port Scan
🇺🇸 xmission.com	2026-10-21 19:52:51 (1 day ago)	Blocked by UFW (TCP on 2005) Source port: 57032 TTL: 123 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 2005) Source port: 57032 TTL: 123 Packet length: 60 TOS: 0x00 This report (for 35.94.104.237) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.242

🇺🇦 194.165.46.45

🇳🇱 185.136.15.81

🇳🇱 185.136.15.80

🇺🇸 162.216.149.10

🇩🇪 109.160.32.140

🇩🇪 109.160.32.119

🇪🇸 88.14.81.91

🇵🇹 85.247.215.139

🇰🇷 59.11.42.221

🇺🇸 47.185.73.141

🇺🇸 47.89.241.188

🇦🇷 45.224.203.56

🇺🇸 43.153.88.229

🇻🇳 210.86.226.51

🇺🇸 162.35.175.24

🇹🇼 114.45.59.56

🇧🇩 103.132.91.161

🇮🇳 103.106.103.218

🇫🇷 82.236.7.25