JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.193.52.91

35.193.52.91 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	91.52.193.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.193.52.91

Whois 35.193.52.91

IP Abuse Reports for 35.193.52.91:

This IP address has been reported a total of 89 times from 76 distinct sources. 35.193.52.91 was first reported on July 31st 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Mga Admin	2026-08-01 23:58:42 (4 minutes ago)	35.193.52.91 - - [02/Aug/2026:06:58:42 +0700] "GET /.env HTTP/1.1" 404 69 "-" "Mozilla/5.0 (compatib ... show more 35.193.52.91 - - [02/Aug/2026:06:58:42 +0700] "GET /.env HTTP/1.1" 404 69 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)" ... show less	Web App Attack
🇳🇱 Site.eu	2026-08-01 23:11:10 (52 minutes ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Hary74656	2026-08-01 22:51:45 (1 hour ago)	[Sun Aug 02 00:51:17.418836 2026] [security2:error] [pid 787866:tid 787946] [client 35.193.52.91:354 ... show more [Sun Aug 02 00:51:17.418836 2026] [security2:error] [pid 787866:tid 787946] [client 35.193.52.91:35434] [client 35.193.52.91] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "dbl.aschi.at"] [uri "/.env"] [unique_id "am54ZdTwNCnVqUjbc0Ay7QAAANY"] [Sun Aug 02 00:51:17.460221 2026] [security2:error] [pid 788257:tid 788364] [client 35.193.52.91:35454] [client 35.193.52.91] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-c ... show less	Web App Attack
🇫🇷 PacketFilter	2026-08-01 22:18:07 (1 hour ago)	Fail2Ban	Hacking Web App Attack
🇩🇪 gadix	2026-08-01 22:17:53 (1 hour ago)	[02/Aug/2026:00:17:51.297859 +0200] am5wj0hJS2179qUhp_P7HAAAAAY 35.193.52.91 43094 127.0.0.1 7081 [0 ... show more [02/Aug/2026:00:17:51.297859 +0200] am5wj0hJS2179qUhp_P7HAAAAAY 35.193.52.91 43094 127.0.0.1 7081 [02/Aug/2026:00:17:51.299550 +0200] am5wj4d9fX06roeQ9gDOFQAAAAA 35.193.52.91 43086 127.0.0.1 7081 [02/Aug/2026:00:17:51.301662 +0200] am5wj78bQfXg_m7Xdm1F6QAAAAE 35.193.52.91 43106 127.0.0.1 7081 ... show less	Web App Attack
🇺🇸 lnklnx	2026-08-01 22:01:29 (2 hours ago)	reader.lnklnx.com:443 35.193.52.91 - - [01/Aug/2026:17:01:26 -0500] "GET /.env HTTP/1.1" 302 2066 "- ... show more reader.lnklnx.com:443 35.193.52.91 - - [01/Aug/2026:17:01:26 -0500] "GET /.env HTTP/1.1" 302 2066 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" ... show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-01 21:59:31 (2 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-31. show less	Web App Attack SSH Hacking
Anonymous	2026-08-01 20:12:04 (3 hours ago)	35.193.52.91 - - [01/Aug/2026:17:12:03 -0300] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWeb ... show more 35.193.52.91 - - [01/Aug/2026:17:12:03 -0300] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])" 35.193.52.91 - - [01/Aug/2026:17:12:03 -0300] "GET /.env.old HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)" 35.193.52.91 - - [01/Aug/2026:17:12:03 -0300] "GET /.env.development HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 35.193.52.91 - - [01/Aug/2026:17:12:03 -0300] "GET /.env.local HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 35.193.52.91 - - [01/Aug/2026:17:12:03 -0300] "GET /admin/.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)" ... show less	Port Scan
Anonymous	2026-08-01 20:05:47 (3 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, SQL injection, Backup file probing show less	Bad Web Bot Web App Attack
🇺🇸 WellSpring	2026-08-01 19:52:17 (4 hours ago)	good bot honeypot on 251.today/admin/.env — WellSpr.ing/NetSentinel civic-AI security layer	Bad Web Bot
🇩🇪 ghostwarriors	2026-08-01 18:20:21 (5 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-01 18:17:30 (5 hours ago)	[Sat Aug 01 20:17:29.031021 2026] [php:error] [pid 3384381] [client 35.193.52.91:1180] script '/var/ ... show more [Sat Aug 01 20:17:29.031021 2026] [php:error] [pid 3384381] [client 35.193.52.91:1180] script '/var/www/11spielerinnen.de/public_html/wp-config.php' not found or unable to stat [Sat Aug 01 20:17:29.033692 2026] [php:error] [pid 3391974] [client 35.193.52.91:1166] script '/var/www/11spielerinnen.de/public_html/config.php' not found or unable to stat [Sat Aug 01 20:17:29.248936 2026] [php:error] [pid 3435204] [client 35.193.52.91:1492] script '/var/www/11spielerinnen.de/public_html/.env.php' not found or unable to stat [Sat Aug 01 20:17:29.275792 2026] [php:error] [pid 3376693] [client 35.193.52.91:1176] script '/var/www/11spielerinnen.de/public_html/.env.local.php' not found or unable to stat [Sat Aug 01 20:17:29.395360 2026] [php:error] [pid 3435204] [client 35.193.52.91:1492] script '/var/www/11spielerinnen.de/public_html/.env.production.php' not found or unable to stat ... show less	Bad Web Bot
🇳🇿 Antinson	2026-08-01 18:07:32 (5 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-08-01 18:05:07 (5 hours ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇳🇱 debestelapp	2026-08-01 17:20:05 (6 hours ago)		Web App Attack

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 2602:fa5d::8b

🇵🇱 194.180.48.130

🇺🇸 170.106.72.93

🇮🇩 163.7.5.147

🇭🇰 152.32.254.89

🇳🇱 138.226.239.10

🇺🇸 135.119.112.96

🇩🇪 92.119.182.134

🇫🇷 88.191.207.137

🇰🇷 218.158.83.154

🇺🇸 216.25.89.123

🇺🇸 207.90.244.17

🇲🇾 202.165.15.132

🇺🇸 170.106.193.108

🇹🇼 165.154.227.158

🇺🇸 161.35.49.224

🇮🇳 139.59.73.240

🇹🇼 101.13.5.30

🇳🇱 91.92.42.126

🇳🇱 81.19.216.73