JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

35.200.88.248

Neutral Activity

Abuse Confidence Score

0% Low Risk

14 reports

13 reporters · latest 2 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 248.88.200.35.bc.googleusercontent.com
Domain Name: google.com
Country: 🇯🇵 Japan
City: Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

35.200.88.248 has been reported 14 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

14 from 13 distinct reporters

First reported

September 11th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-13 08:31:57 UTC · (2 months ago)	[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.200.88.248 - - [13/Sep/2026:10:31:56 +0200] "GET /static../.env HTTP/1.1" 404 2122 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); co ... show more [ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.200.88.248 - - [13/Sep/2026:10:31:56 +0200] "GET /static../.env HTTP/1.1" 404 2122 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" ... show less	Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2026-09-12 22:17:58 UTC · (2 months ago)	(CT) IP 35.200.88.248 (JP/Japan/248.88.200.35.bc.googleusercontent.com) found to have 733 connections	DDoS Attack
🇺🇸 TPI-Abuse	2026-09-12 17:50:08 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 35.200.88.248 (248.88.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 13:50:02.496860 2026] [security2:error] [pid 2485:tid 2 ... show more (mod_security) mod_security (id:210492) triggered by 35.200.88.248 (248.88.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 13:50:02.496860 2026] [security2:error] [pid 2485:tid 2485] [client 35.200.88.248:48182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.143"] [uri "/media../.env"] [unique_id "aqWQygkiAYF0QkV7NX3xqwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-12 16:16:12 UTC · (2 months ago)	fail2ban: Sensitive web probes detected	Web App Attack
🇧🇾 lns.bz	2026-09-12 14:16:59 UTC · (2 months ago)	.env scanning [BY]	Web App Attack
🇧🇪 FrankNeirynck	2026-09-12 13:07:16 UTC · (2 months ago)	213.219.151.48 35.200.88.248 - - [12/Sep/2026:15:07:15 +0200] "GET /__aws_leak_probe_c70b3718__ HTTP/1.1" 404 1317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/shari ... show more 213.219.151.48 35.200.88.248 - - [12/Sep/2026:15:07:15 +0200] "GET /__aws_leak_probe_c70b3718__ HTTP/1.1" 404 1317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 0.003 213.219.151.48 35.200.88.248 - - [12/Sep/2026:15:07:15 +0200] "GET /static../.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 0.000 213.219.151.48 35.200.88.248 - - [12/Sep/2026:15:07:16 +0200] "GET /media../.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" 0.000 ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 11:41:47 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 35.200.88.248 (248.88.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 07:41:44.239872 2026] [security2:error] [pid 15367:tid ... show more (mod_security) mod_security (id:210492) triggered by 35.200.88.248 (248.88.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 07:41:44.239872 2026] [security2:error] [pid 15367:tid 15367] [client 35.200.88.248:58944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.37"] [uri "/static../.env"] [unique_id "aqU6eIlqaZSq4PEfrmEXRwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 Bro Charlie	2026-09-12 08:09:55 UTC · (2 months ago)	35.200.88.248 - - [12/Sep/2026:16:09:50 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" "-" 35.200.88.248 - - [12/Sep/2026:16:09:50 +0800] "GET / ... show more 35.200.88.248 - - [12/Sep/2026:16:09:50 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" "-" 35.200.88.248 - - [12/Sep/2026:16:09:50 +0800] "GET /__aws_leak_probe_ef50db45__ HTTP/1.1" 403 16922 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" 35.200.88.248 - - [12/Sep/2026:16:09:50 +0800] "GET /static../.env HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)" "-" 35.200.88.248 - - [12/Sep/2026:16:09:50 +0800] "GET /media../.env HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.107.2 Mobile Safari/537.36; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" "-" 35.200.88.248 - - [12/Sep/2026:16:09:51 +0800] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 403 16922 "-" "Mo ... show less	DDoS Attack
Anonymous	2026-09-12 07:01:57 UTC · (2 months ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇵🇱 TaKeN	2026-09-12 02:37:29 UTC · (2 months ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching blocked event(s) between 2026-09-12T04:37:29+02:00 and 2026-09-12T04:37:29+02:00. Sample requested path ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching blocked event(s) between 2026-09-12T04:37:29+02:00 and 2026-09-12T04:37:29+02:00. Sample requested paths: /.env. show less	Web App Attack Hacking
🇺🇸 factor1	2026-09-12 01:51:02 UTC · (2 months ago)	CrowdSec at athena Reports Abuse	Web App Attack
🇳🇱 Savvii	2026-09-11 19:43:11 UTC · (2 months ago)	20 attempts against mh_ha-misbehave-ban on chard	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RogueAutomata	2026-09-11 17:51:48 UTC · (2 months ago)	Detected malicious request: GET /@fs/proc/1/environ?raw?? Detections triggered: GET with unexpected args Access via IP addr (v4)	Web App Attack
Anonymous	2026-09-11 17:48:32 UTC · (2 months ago)	35.200.88.248 - - [11/Sep/2026:14:48:31 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot" 35.200.88.248 - - [11/Sep/2026:14:48:31 -0300] "GET ... show more 35.200.88.248 - - [11/Sep/2026:14:48:31 -0300] "GET /@fs/../.env?raw?? HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot" 35.200.88.248 - - [11/Sep/2026:14:48:31 -0300] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 35.200.88.248 - - [11/Sep/2026:14:48:31 -0300] "GET /static../.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.3003.173 Safari/537.36; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 35.200.88.248 - - [11/Sep/2026:14:48:31 -0300] "GET /media../.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 35.200.88.248 - - [11/Sep/2026:14:48:31 -0300] "GET /app/.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 1 ... show less	Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 194.99.25.168

🇺🇸 143.198.238.87

🇺🇸 66.132.224.26

🇫🇮 35.228.125.138

🇺🇸 2001:470:1:fb5::2bf

🇹🇿 196.45.151.74

🇺🇸 152.32.208.169

🇲🇾 121.121.56.105

🇺🇸 70.169.4.116

🇺🇦 185.38.219.84

🇲🇾 180.74.65.57

🇺🇸 162.243.6.216

🇨🇳 116.147.151.46

🇩🇪 83.135.162.96

🇳🇱 45.66.35.13

🇧🇪 34.38.88.176

🇬🇧 5.226.140.36

🇳🇱 213.152.161.58

🇨🇳 203.212.9.248

🇹🇹 170.82.210.242