JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.95.52.28

35.95.52.28 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 60%: ?

60%

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-35-95-52-28.us-west-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Boardman, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.95.52.28

Whois 35.95.52.28

IP Abuse Reports for 35.95.52.28:

This IP address has been reported a total of 14 times from 11 distinct sources. 35.95.52.28 was first reported on September 12th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Jochen Pretli	2026-09-16 17:08:22 (1 day ago)	connection to honeypot	Email Spam Port Scan
🇩🇪 Jochen Pretli	2026-09-15 12:37:42 (3 days ago)	connection to honeypot	Email Spam Port Scan
🇫🇷 service Informatique	2026-09-15 04:00:37 (3 days ago)	GET /robots.txt	Web App Attack
🇨🇦 lakered	2026-09-14 14:00:36 (4 days ago)	Detectors: [NGINX] \| Reasons: bad_user_agent \| Evidence: URL-Found-In-UA, High-Criminality-Signature ... show more Detectors: [NGINX] \| Reasons: bad_user_agent \| Evidence: URL-Found-In-UA, High-Criminality-Signature (ja4:t13d2512h1 - Ratio:0.98), High-Criminality-Signature (ja4h:5284a4e8dcdc8b18d4c888678c3ea4b3 - Ratio:0.96) \| UA: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) \| TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:1286m) show less	Port Scan
🇭🇺 kranem	2026-09-14 09:00:29 (4 days ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) Protocol: HTTP/2 ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-09-14T06:44:49Z User-Agent: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) show less	Bad Web Bot
🇭🇺 kranem	2026-09-13 21:00:07 (4 days ago)	Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) Protocol: HTTP/2 ... show more Triggered Cloudflare WAF from US. Action taken: BLOCK ASN: 16509 (Amazon.com, Inc.) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-09-13T20:12:28Z User-Agent: Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9) show less	Bad Web Bot
🇩🇪 ddobko	2026-09-13 18:38:29 (4 days ago)		Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-09-13 07:01:47 (5 days ago)	gie-88 : Bloc AI bots=>/robots.txt(wpbot)	Hacking
🇩🇰 ScamAware	2026-09-13 03:24:24 (5 days ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇳🇱 BlueWire Hosting	2026-09-13 02:49:12 (5 days ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇫🇷 masterguru	2026-09-13 01:32:42 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.95.52.28 (US/United States/ec2-35- ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.95.52.28 (US/United States/ec2-35-95-52-28.us-west-2.compute.amazonaws.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 Gabriel Camargo	2026-09-12 21:51:12 (5 days ago)	35.95.52.28 - - [12/Sep/2026:16:50:14 -0500] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (co ... show more 35.95.52.28 - - [12/Sep/2026:16:50:14 -0500] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 35.95.52.28 - - [12/Sep/2026:16:50:43 -0500] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" 35.95.52.28 - - [12/Sep/2026:16:51:12 -0500] "GET /robots.txt HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; wpbot/1.4; +https://forms.gle/ajBaxygz9jSR8p8G9)" ... show less	Brute-Force SSH
🇺🇸 SX Communications	2026-09-12 18:46:47 (5 days ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 35.95.52.28: traffic from this addr ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 35.95.52.28: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 masterguru	2026-09-12 16:34:57 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.95.52.28 (US/United States/ec2-35- ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.95.52.28 (US/United States/ec2-35-95-52-28.us-west-2.compute.amazonaws.com): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇬 102.90.82.57

🇳🇱 45.148.10.157

🇺🇸 4.148.17.55

🇺🇸 2600:1f18:3120:f502:34b0:2591:9363:b6d6

🇺🇸 195.184.76.125

🇺🇸 195.184.76.1

🇧🇷 177.20.224.222

🇧🇷 170.78.248.216

🇺🇸 148.59.129.93

🇮🇳 139.5.248.250

🇧🇬 79.124.56.142

🇮🇳 51.162.178.199

🇳🇱 45.148.10.152

🇨🇳 39.184.146.79

🇧🇷 16.5.0.236

🇺🇿 213.230.93.49

🇺🇸 205.210.31.44

🇻🇳 171.244.201.80

🇰🇪 102.0.27.66

🇵🇹 89.153.125.230