JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.221.157.96

35.221.157.96 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	96.157.221.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.221.157.96

Whois 35.221.157.96

IP Abuse Reports for 35.221.157.96:

This IP address has been reported a total of 51 times from 32 distinct sources. 35.221.157.96 was first reported on September 11th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 Per-Erik Runebert	2026-09-14 08:39:45 (2 days ago)	Excessive unauthorized requests	Hacking
🇲🇽 octageeks.com	2026-09-14 04:21:13 (2 days ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack
Anonymous	2026-09-14 04:14:30 (2 days ago)	\| [Dangerous/Taiwan] Aggressive IP 35.221.157.96 (~30 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Dangerous/Taiwan] Aggressive IP 35.221.157.96 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇸🇬 Cloudkul Cloudkul	2026-09-13 19:06:25 (2 days ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
Anonymous	2026-09-13 18:21:01 (2 days ago)	Bot / scanning and/or hacking attempts: GET /@fs/src/.env?raw?? HTTP/2.0, GET /portal HTTP/2.0, [81/ ... show more Bot / scanning and/or hacking attempts: GET /@fs/src/.env?raw?? HTTP/2.0, GET /portal HTTP/2.0, [81/80] done: stream 163, GET /.git/config, GET /admin/login HTTP/2.0, POST /api HTTP/2.0, GET /ssl/localhost.key HTTP/2.0, GET /backoffice HTTP/2.0, [82/81] done: stream 169, POST /, GET /private-key HTTP/2.0, [48/48] read: stream 0, , GET /panel HTTP/2.0, GET /dashboard HTTP/2.0, GET /app HTTP/2.0, [15/15] read: stream 0, , [44/41] read: stream 0, , GET /host.key HTTP/2.0, GET /graphql HTTP/2.0 show less	Hacking Web App Attack
🇳🇱 tmiland	2026-09-13 18:17:35 (2 days ago)	(nginx_404) Dot directory Honeypot Trap 35.221.157.96 (TW/Taiwan/96.157.221.35.bc.googleusercontent. ... show more (nginx_404) Dot directory Honeypot Trap 35.221.157.96 (TW/Taiwan/96.157.221.35.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 35.221.157.96; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.221.157.96 - - [13/Sep/2026:20:17:34 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 35.221.157.96 - - [13/Sep/2026:20:17:34 +0200] "GET /.aws/config HTTP/1.1" 404 11849 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" show less	Brute-Force
Anonymous	2026-09-13 18:10:08 (2 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-13 17:35:56 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.221.157.96 (96.157.221.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.221.157.96 (96.157.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 13:35:52.334541 2026] [security2:error] [pid 28677:tid 28677] [client 35.221.157.96:35612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rookscpa.com"] [uri "/.env.development"] [unique_id "aqbe-FhntnniJJaFHGUPhAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-09-13 17:30:11 (2 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-09-13 17:16:26 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.221.157.96 (96.157.221.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.221.157.96 (96.157.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 13:16:21.390936 2026] [security2:error] [pid 28571:tid 28571] [client 35.221.157.96:59880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rondrez.com"] [uri "/uploads../.env"] [unique_id "aqbaZSbIjhJ5MkLmWGa9sAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-13 17:11:17 (2 days ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196) show less	Hacking
🇷🇴 iulianh	2026-09-13 17:07:33 (2 days ago)	80,443	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-13 16:27:45 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.221.157.96 (96.157.221.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.221.157.96 (96.157.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 12:27:37.243656 2026] [security2:error] [pid 31915:tid 31915] [client 35.221.157.96:45836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roguetechink.com"] [uri "/.env"] [unique_id "aqbO-RH5kxUW48lcIPb8-QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-13 16:18:20 (2 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-13 16:15:18 (2 days ago)	HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ... show more HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197) show less	Bad Web Bot

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.205

🇧🇬 109.160.32.70

🇻🇳 103.39.93.76

🇰🇷 61.85.7.252

🇺🇸 52.146.20.92

🇺🇸 50.84.211.204

🇳🇱 45.148.10.141

🇺🇸 45.79.105.146

🇧🇷 43.157.149.188

🇲🇿 41.94.1.199

🇺🇸 23.234.103.155

🇮🇪 20.13.164.162

🇫🇷 2001:41d0:33a:a00::404

🇮🇩 202.148.4.118

🇯🇴 176.29.161.189

🇫🇮 147.185.133.60

🇮🇳 122.15.129.26

🇰🇿 88.204.245.66

🇷🇴 80.94.92.234

🇨🇦 51.79.86.230