35.204.96.39

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
24 reports
20 reporters · latest 2 months ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
39.96.204.35.bc.googleusercontent.com
Domain Name
google.com
Country
🇳🇱 Netherlands
City
Groningen, Groningen
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

35.204.96.39 has been reported 24 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
24 from 20 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=95, sources=1)
Hacking Brute-Force SSH
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-14.
Web App Attack SSH Hacking
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸 Charlesiv
Triggered Cloudflare WAF (firewallCustom) from NL. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-05-14T20:34:55Z Ray ID: 9fbcafb95aeb1c7c UA: Empty string
Bad Web Bot
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2026-05-14
Web App Attack SSH Hacking
🇧🇪 cmbplf
1.873 requests with url.path */.git/config
Brute-Force Bad Web Bot
🇦🇺 2000cn.com.au
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack Hacking
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇩🇰 ScamAware
Web App Attack
🇩🇪 big-cloud.nl
Try to access /.git/config
Web App Attack
Anonymous
suspicious request in access.log
Web App Attack
🇬🇧 Aetherweb Ark
(mod_security) mod_security (id:949110) triggered by 35.204.96.39 (NL/Netherlands/39.96.204.35.bc.googleusercontent.com): N in the last X secs
Web App Attack
Anonymous
35.204.96.39 - - [14/May/2026:21:04:00 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "-"
Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host Web App Attack
🇮🇩 Burayot
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.204.96.39 (39.96.204.35.bc.googleusercontent.com): 1 in the last 3600 secs
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 78.29.48.163
🇿🇦 197.242.146.149
🇫🇷 85.217.140.45
🇨🇳 36.104.147.6
🇬🇧 35.203.210.155
🇮🇹 172.213.26.234
🇿🇦 165.165.94.27
🇳🇬 165.154.11.149
🇷🇸 109.198.11.31
🇳🇱 109.160.32.154
🇺🇸 103.215.74.112
🇷🇺 94.233.127.194
🇳🇱 93.123.109.103
🇯🇴 91.186.243.77
🇺🇦 37.221.135.213
🇹🇷 24.133.249.240
🇺🇸 24.95.186.193
🇲🇦 196.117.251.244
🇫🇮 185.68.152.224
🇮🇳 168.220.253.106
feedback