JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.213.241.18

35.213.241.18 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 82%: ?

82%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS19527
Hostname(s)	18.241.213.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.213.241.18

Whois 35.213.241.18

IP Abuse Reports for 35.213.241.18:

This IP address has been reported a total of 30 times from 19 distinct sources. 35.213.241.18 was first reported on October 5th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-10-13 06:38:40 (1 week ago)	2.486 requests with url.path *.env	Brute-Force Bad Web Bot
🇺🇸 mnsf	2026-10-13 04:05:18 (1 week ago)	Abuse Detected (14)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 00:47:58 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 20:47:53.628272 2026] [security2:error] [pid 30746:tid 30746] [client 35.213.241.18:33232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "panama-boat-registration.com"] [uri "/.git/config"] [unique_id "as1_uR5xCgc01U-g038kpAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-13 00:02:46 (1 week ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-10-12 23:37:01 (1 week ago)	(mod_security) mod_security (id:949110) triggered by 35.213.241.18 (18.241.213.35.bc.googleuserconte ... show more (mod_security) mod_security (id:949110) triggered by 35.213.241.18 (18.241.213.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 19:36:58.829418 2026] [security2:error] [pid 21088:tid 21088] [client 35.213.241.18:43170] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "panabait.com"] [uri "/.git/config"] [unique_id "as1vGqMF3RrHQzHuOX15VwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-12 21:50:17 (1 week ago)	[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35. ... show more [ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.213.241.18 - - [12/Oct/2026:23:50:16 +0200] "GET /.git/config HTTP/1.1" 301 693 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-12 21:45:42 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:45:38.663740 2026] [security2:error] [pid 10487:tid 10487] [client 35.213.241.18:55052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamplonaserviciotecnico.ayudaclic.com"] [uri "/.git/config"] [unique_id "as1VArzZtkPjfspxkO0G1gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-12 19:41:41 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:41:34.566484 2026] [security2:error] [pid 6352:tid 6352] [client 35.213.241.18:37056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamelaweisberg.com"] [uri "/.git/config"] [unique_id "as037v0H065_IPDu6TCtIAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 clapper	2026-10-12 19:27:47 (1 week ago)	(mod_security) mod_security (id:949110) triggered by 35.213.241.18 (AU/Australia/18.241.213.35.bc.go ... show more (mod_security) mod_security (id:949110) triggered by 35.213.241.18 (AU/Australia/18.241.213.35.bc.googleusercontent.com): 3 in the last 3600 secs; ID: LUC show less	Brute-Force Bad Web Bot
Anonymous	2026-10-12 09:10:08 (1 week ago)	\| [Dangerous/Australia] Aggressive IP 35.213.241.18 (~30 hits). Type: DoS Defender- Web server 400 e ... show more \| [Dangerous/Australia] Aggressive IP 35.213.241.18 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 gamabe	2026-10-12 07:51:19 (1 week ago)	Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.	Hacking
🇺🇸 TPI-Abuse	2026-10-10 16:47:12 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 12:47:06.919532 2026] [security2:error] [pid 20912:tid 20912] [client 35.213.241.18:33474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psicologos-omega.com"] [uri "/.git/config"] [unique_id "aspsCiGAUxBFoI1Y6uQrpgAAAII"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LavrinenkoRM	2026-10-10 16:35:32 (1 week ago)	Sentinel WAF: web/pruz.lrm-it.com; Honeypot URL; confidence=90; blocked_at=2026-10-10T16:26:16.75705 ... show more Sentinel WAF: web/pruz.lrm-it.com; Honeypot URL; confidence=90; blocked_at=2026-10-10T16:26:16.757055+00:00 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-09 18:41:34 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.213.241.18 (18.241.213.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 14:41:29.913523 2026] [security2:error] [pid 20097:tid 20106] [client 35.213.241.18:42426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.triciastreasures-bistro.com"] [uri "/.git/config"] [unique_id "ask1WTstw9vSSdByD8lfagAAAUI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-07 09:40:46 (2 weeks ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 217.145.224.143

🇺🇸 216.194.90.182

🇰🇷 210.206.95.162

🇺🇸 195.184.76.181

🇨🇱 190.171.189.85

🇰🇷 175.209.156.146

🇺🇸 174.129.58.61

🇹🇼 165.154.227.8

🇺🇸 162.216.149.102

🇻🇳 103.67.162.139

🇫🇷 91.231.89.16

🇺🇸 70.184.96.161

🇮🇪 34.255.120.121

🇰🇷 218.236.58.204

🇪🇹 196.191.54.199

🇨🇴 190.252.133.135

🇺🇸 173.52.119.106

🇸🇬 168.144.47.205

🇷🇺 153.76.165.240

🇨🇳 120.55.81.118