JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.202.252.113

35.202.252.113 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	113.252.202.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.202.252.113

Whois 35.202.252.113

IP Abuse Reports for 35.202.252.113:

This IP address has been reported a total of 30 times from 23 distinct sources. 35.202.252.113 was first reported on November 2nd 2025, and the most recent report was 26 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-28 19:03:24 (26 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 15:03:18.781873 2026] [security2:error] [pid 14748:tid 14748] [client 35.202.252.113:36570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.suffecool.suffe.cool"] [uri "/.env"] [unique_id "apHbdti2_4ipbYjzXeC3qwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 18:48:00 (41 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:47:54.342490 2026] [security2:error] [pid 30399:tid 30399] [client 35.202.252.113:47956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestsongs.com"] [uri "/wp-config.php.swp"] [unique_id "apHX2knnkfpJxB6U0LcRtwAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 18:11:45 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:11:40.628594 2026] [security2:error] [pid 18284:tid 18284] [client 35.202.252.113:45650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allworld.csennews.com"] [uri "/.env.dev"] [unique_id "apHPXHn0iUW4VvHSFRbPzQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 DEV-DNS	2026-08-28 18:03:36 (1 hour ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇮🇹 CoreTech srl	2026-08-28 17:43:57 (1 hour ago)	cloudlinux2 fail2ban: 2026-08-28 19:39:37,538 fail2ban.actions [1478]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-28 19:39:37,538 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 34.48.202.98cloudlinux2 fail2ban: 2026-08-28 19:39:39,903 fail2ban.filter [1478]: INFO [plesk-wordpress] Found 103.159.37.173 - 2026-08-28 19:39:39cloudlinux2 fail2ban: 2026-08-28 19:39:50,162 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 34.176.27.253cloudlinux2 fail2ban: 2026-08-28 19:39:53,376 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 80.2.2.10cloudlinux2 fail2ban: 2026-08-28 19:41:10,303 fail2ban.filter [1478]: INFO [plesk-wordpress] Found 162.215.121.77 - 2026-08-28 19:41:10cloudlinux2 fail2ban: 2026-08-28 19:41:23,199 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 115.135.198.168 - 2026-08-28 19:41:22cloudlinux2 fail2ban: 2026-08-28 19:41:51,185 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 54.226.15.31 - 2026-08-28 19:41:51cloudlinux2 fail2ban: 2026-08-28 19:41:51,172 fail2ban.filter show less	Web App Attack
🇳🇱 e.fierstra	2026-08-28 17:32:29 (1 hour ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 17:23:06 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:22:59.486190 2026] [security2:error] [pid 22778:tid 22778] [client 35.202.252.113:35434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oruguitas.org"] [uri "/.env.production"] [unique_id "apHD8y44VEs75wlFx6ZV9AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 mediarama.com	2026-08-28 16:45:50 (2 hours ago)	Banned by Fail2Ban	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-28 16:27:42 (3 hours ago)	[28/Aug/2026:19:27:42 +0300] -- 35.202.252.113 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET ... show more [28/Aug/2026:19:27:42 +0300] -- 35.202.252.113 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /storage/logs/laravel.log HTTP/1.1 show less	Bad Web Bot Web App Attack
Anonymous	2026-08-28 15:35:03 (3 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 15:15:18 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 11:15:15.407140 2026] [security2:error] [pid 29481:tid 29481] [client 35.202.252.113:46740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.xirin.net.owenmail.com"] [uri "/.env"] [unique_id "apGmA8TkoioUtyvR-XU2BgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-08-28 15:05:40 (4 hours ago)	Abuse Detected (9)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 14:48:07 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.202.252.113 (113.252.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:48:02.856636 2026] [security2:error] [pid 19703:tid 19703] [client 35.202.252.113:56782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.deepseasugar.com.lakesidedetectiveagency.com"] [uri "/.env"] [unique_id "apGfovWviPlGHCcrwJgz6QAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Feelautom	2026-08-28 14:40:04 (4 hours ago)	[FeelAutom Auto-Ban] PathScan: /.env.save (Score: 202)	Port Scan
🇩🇪 s@ch@	2026-08-28 14:15:02 (5 hours ago)	Jail: plesk-modsecurity \| Web application attack (Plesk ModSecurity)	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.182

🇰🇷 118.37.214.187

🇳🇱 45.148.10.141

🇺🇸 35.245.183.46

🇻🇳 171.244.37.103

🇺🇸 162.216.149.208

🇺🇸 158.51.96.38

🇱🇹 92.62.139.168

🇧🇪 34.14.116.38

🇰🇷 222.239.251.12

🇮🇳 182.95.61.82

🇨🇳 120.203.161.200

🇫🇷 91.231.89.126

🇧🇬 91.191.209.46

🇺🇸 71.235.27.139

🇺🇸 2607:f8b0:400e:c07::121

🇺🇸 173.252.82.64

🇺🇸 172.174.5.146

🇺🇸 172.81.129.130

🇮🇳 125.99.240.61