JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.95.244.203

35.95.244.203 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-95-244-203.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.95.244.203

Whois 35.95.244.203

IP Abuse Reports for 35.95.244.203:

This IP address has been reported a total of 35 times from 31 distinct sources. 35.95.244.203 was first reported on September 16th 2026, and the most recent report was 20 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 H24	2026-09-17 00:04:24 (20 minutes ago)	/api/.env /api/v1/.env /client/.env /backend/.env /app/.env /admin/.env /config/.env	Web App Attack
🇩🇪 XICTRON	2026-09-16 23:55:06 (29 minutes ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇳🇱 Savvii	2026-09-16 23:26:11 (58 minutes ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-09-16 22:45:28 (1 hour ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-09-16 22:21:50 (2 hours ago)		Brute-Force Web App Attack
🇪🇸 el-brujo	2026-09-16 21:37:12 (2 hours ago)	35.95.244.203 - - [16/Sep/2026:23:37:11 +0200] "GET /z9x8c7v6b5-debug-trigger-elhacker.net HTTP/2.0" ... show more 35.95.244.203 - - [16/Sep/2026:23:37:11 +0200] "GET /z9x8c7v6b5-debug-trigger-elhacker.net HTTP/2.0" 404 15974 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 35.95.244.203 - - [16/Sep/2026:23:37:11 +0200] "GET /.env.development?import&raw HTTP/2.0" 404 15974 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 35.95.244.203 - - [16/Sep/2026:23:37:11 +0200] "GET /@fs/app/.env.production?import&raw?? HTTP/2.0" 404 15974 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 35.95.244.203 - - [16/Sep/2026:23:37:12 +0200] "GET /build/manifest.json HTTP/2.0" 404 15974 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" ... show less	Web App Attack Hacking
Anonymous	2026-09-16 21:35:02 (2 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 20:50:46 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.95.244.203 (ec2-35-95-244-203.us-west-2.comp ... show more (mod_security) mod_security (id:210492) triggered by 35.95.244.203 (ec2-35-95-244-203.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:50:41.553776 2026] [security2:error] [pid 26907:tid 26907] [client 35.95.244.203:34808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "depcare.com"] [uri "/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env"] [unique_id "aqsBIVZowJeLY2nxA9errgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Séfora Srl	2026-09-16 20:50:34 (3 hours ago)	crowdsecurity/http-sensitive-files detected by CrowdSec	Web App Attack
🇳🇱 Savvii	2026-09-16 20:50:05 (3 hours ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇨🇿 antihack.anarchista.xyz	2026-09-16 20:49:50 (3 hours ago)	404 burst: 20 hits in 5 min, URI /read-document, Ref , UA Mozilla/5.0 (compatible; PanguBot/1.0; +ht ... show more 404 burst: 20 hits in 5 min, URI /read-document, Ref , UA Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/) show less	Brute-Force Web App Attack Bad Web Bot
🇳🇱 Alt255	2026-09-16 20:49:30 (3 hours ago)	[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.95.244.203 - - [16/Sep/2026:22:49:17 +0200] "GET /env/.env HTTP/2.0" 403 346 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" ... show less	Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-09-16 20:17:35 (4 hours ago)	35.95.244.203 - - [16/Sep/2026:20:17:06 +0000] "GET /.ssh/authorized_keys HTTP/2.0" 403 82469 "https ... show more 35.95.244.203 - - [16/Sep/2026:20:17:06 +0000] "GET /.ssh/authorized_keys HTTP/2.0" 403 82469 "https://cool-dreams.com/.ssh/authorized_keys" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)" "-" edge="35.95.244.203" 35.95.244.203 - - [16/Sep/2026:20:17:07 +0000] "GET /.ssh/config HTTP/2.0" 403 82365 "https://cool-dreams.com/.ssh/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" "-" edge="35.95.244.203" 35.95.244.203 - - [16/Sep/2026:20:17:07 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 81208 "https://cool-dreams.com/dist/.vite/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="35.95.244.203" 35.95.244.203 - - [16/Sep/2026:20:17:08 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 81268 "https://cool-dreams.com/.vite/manifest.json" "Mozilla/5.0 ( ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 20:11:30 (4 hours ago)	(mod_security) mod_security (id:210730) triggered by 35.95.244.203 (ec2-35-95-244-203.us-west-2.comp ... show more (mod_security) mod_security (id:210730) triggered by 35.95.244.203 (ec2-35-95-244-203.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:11:25.341052 2026] [security2:error] [pid 25934:tid 25934] [client 35.95.244.203:51050] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|comobarbershop.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comobarbershop.com"] [uri "/z9x8c7v6b5-debug-trigger-comobarbershop.com"] [unique_id "aqr37biXIEwZ6GTO4UqZSgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-16 19:38:11 (4 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.21

🇷🇺 212.19.17.100

🇭🇰 223.197.146.174

🇧🇩 203.202.242.45

🇧🇬 109.160.32.42

🇩🇪 104.207.56.161

🇨🇱 91.229.228.16

🇺🇸 87.232.154.75

🇨🇦 85.217.149.37

🇺🇸 64.62.197.150

🇺🇸 43.130.39.153

🇺🇸 162.216.150.58

🇨🇳 124.220.59.171

🇦🇺 106.70.0.181

🇫🇷 91.231.89.39

🇫🇷 91.231.89.31

🇮🇱 79.177.139.138

🇧🇬 79.124.56.142

🇱🇹 77.90.185.17

🇺🇸 40.119.27.158