JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.94.113.52

35.94.113.52 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-94-113-52.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.94.113.52

Whois 35.94.113.52

IP Abuse Reports for 35.94.113.52:

This IP address has been reported a total of 57 times from 36 distinct sources. 35.94.113.52 was first reported on July 1st 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 internetworld	2026-07-07 18:14:19 (5 days ago)	internetworld-prod-01 Fail2Ban ban. Jail=nginx-web-probe-iw. Sanitized automatic report from interne ... show more internetworld-prod-01 Fail2Ban ban. Jail=nginx-web-probe-iw. Sanitized automatic report from internetworld.ca server security monitoring. show less	Brute-Force Web App Attack
🇬🇧 djboddington	2026-07-05 11:15:40 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
🇩🇪 on-com	2026-07-05 09:59:03 (1 week ago)	URL scan	Brute-Force Web App Attack
🇭🇺 kranem	2026-07-05 09:00:33 (1 week ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) Protocol: HTTP/1 ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) Protocol: HTTP/1.1 (GET method) Endpoint: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php Timestamp: 2026-07-05T06:31:06Z User-Agent: python-requests/2.25.1 show less	Bad Web Bot
🇩🇪 big-cloud.nl	2026-07-05 07:54:06 (1 week ago)	Try to access /.env	Web App Attack
🇩🇪 AetherFox	2026-07-05 05:30:42 (1 week ago)	AetherFox VoidGuard detected: [Sun Jul 05 05:30:37.888547 2026] [authz_core:error] [pid 3699412:tid ... show more AetherFox VoidGuard detected: [Sun Jul 05 05:30:37.888547 2026] [authz_core:error] [pid 3699412:tid 3699465] [client 35.94.113.52:50217] AH01630: client denied by server configuration: proxy:http://[MASKED]/.env [Sun Jul 05 05:30:37.888761 2026] [authz_core:error] [pid 3699412:tid 3699465] [client 35.94.113.52:50217] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sun Jul 05 05:30:39.723260 2026] [authz_core:error] [pid 3699412:tid 3699459] [client 35.94.113.52:50267] AH01630: client denied by server configuration: proxy:http://[MASKED]/ [Sun Jul 05 05:30:39.723840 2026] [authz_core:error] [pid 3699412:tid 3699459] [client 35.94.113.52:50267] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html [Sun Jul 05 05:30:41.896257 2026] [authz_core:error] [pid 3699412:tid 3699464] [client 35.94.113.52:50314] AH01630: client denied by server configuration: proxy:https://[MASKED]/.env ... show less	Bad Web Bot Web App Attack
🇧🇷 Halux	2026-07-04 21:21:10 (1 week ago)	35.94.113.52 Probing protected path or service	Web App Attack
🇩🇪 pltcldvlpr	2026-07-04 14:38:46 (1 week ago)	CMS/framework probe: 35.94.113.52 - - [04/Jul/2026:16:38:45 +0200] "GET /.env HTTP/1.1" 301 178 "-" ... show more CMS/framework probe: 35.94.113.52 - - [04/Jul/2026:16:38:45 +0200] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" asn=16509 org="Amazon.com, Inc." country=US ... show less	Web App Attack
🇧🇪 cmbplf	2026-07-03 16:52:46 (1 week ago)	111 requests with url.path /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-03 14:46:15 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.94.113.52 (ec2-35-94-113-52.us-west-2.comput ... show more (mod_security) mod_security (id:210492) triggered by 35.94.113.52 (ec2-35-94-113-52.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 10:46:08.534870 2026] [security2:error] [pid 4381:tid 4381] [client 35.94.113.52:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colonybet.com"] [uri "/.env"] [unique_id "akfLMF3oMTWXGiv1xhIhwAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-03 14:04:31 (1 week ago)	Detected by CrowdSec: crowdsecurity/CVE-2017-9841	Web App Attack
🇩🇪 todix	2026-07-03 12:09:01 (1 week ago)	Web App Attack Exploid from 35.94.113.52	Web App Attack
🇩🇪 Vegascosmetics	2026-07-03 10:37:52 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after attack pattern. Vegas Security	Hacking Brute-Force
Anonymous	2026-07-03 05:50:48 (1 week ago)	35.94.113.52 - - [03/Jul/2026:05:50:47 +0000] "GET /.env HTTP/1.1" 302 491 "-" "Mozilla/5.0 (Linux; ... show more 35.94.113.52 - - [03/Jul/2026:05:50:47 +0000] "GET /.env HTTP/1.1" 302 491 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-07-02 23:15:25 (1 week ago)	Accessed trap at '/.env'	Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 62.60.130.219

🇩🇪 178.104.87.76

🇷🇺 154.90.70.155

🇺🇸 148.153.139.141

🇵🇰 121.52.147.5

🇧🇬 79.124.62.126

🇩🇪 69.5.169.191

🇺🇸 64.23.166.74

🇸🇬 43.134.49.202

🇳🇱 195.178.110.227

🇺🇸 157.245.123.148

🇳🇱 86.54.31.38

🇺🇸 47.251.61.27

🇧🇷 45.172.162.153

🇭🇰 43.132.150.89

🇺🇸 23.27.78.187

🇩🇪 167.94.145.18

🇮🇳 143.244.141.229

🇨🇳 121.43.75.36

🇮🇷 87.107.195.13