JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.239.144.1

35.239.144.1 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	1.144.239.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.239.144.1

Whois 35.239.144.1

IP Abuse Reports for 35.239.144.1:

This IP address has been reported a total of 21 times from 20 distinct sources. 35.239.144.1 was first reported on June 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-15 22:01:57 (1 day ago)	Auto-ban: >3000 req/min op 2026-06-15	Web App Attack SSH Hacking
🇧🇾 lns.bz	2026-06-15 14:59:29 (2 days ago)	Too many 404 requests [BY]	Web App Attack
🇪🇪 netitaat	2026-06-15 14:05:00 (2 days ago)	crowdsecurity/http-probing, crowdsecurity/http-sensitive-files, UA classes and rotation detected 20 ... show more crowdsecurity/http-probing, crowdsecurity/http-sensitive-files, UA classes and rotation detected 2026-06-15T13:16:28.34Z 35.239.144.1 GET /app/.git/config status=404 UA=DESKTOP/Linux 2026-06-15T13:16:28.35Z 35.239.144.1 GET /.git/config status=404 UA=DESKTOP/Mac 2026-06-15T13:16:28.36Z 35.239.144.1 GET /src/.git/config status=404 UA=DESKTOP/Windows 2026-06-15T13:16:28.37Z 35.239.144.1 GET /backend/.git/config status=404 UA=MOBILE/Android 2026-06-15T13:16:28.38Z 35.239.144.1 GET /frontend/.git/config status=404 UA=DESKTOP/Windows 2026-06-15T13:16:28.40Z 35.239.144.1 GET /api/.git/config status=404 UA=DESKTOP/Windows 2026-06-15T13:16:28.41Z 35.239.144.1 GET /v1/.git/config status=404 UA=DESKTOP/Mac 2026-06-15T13:16:28.42Z 35.239.144.1 GET /v2/.git/config status=404 UA=DESKTOP/Linux 2026-06-15T13:16:28.42Z 35.239.144.1 GET /v3/.git/config status=404 UA=MOBILE/iPhone etc. show less	Web App Attack
🇳🇱 GabrielJST	2026-06-15 11:13:29 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 35.239.144.1 (US/United States/1.144.23 ... show more (mod_security) mod_security triggered on hostname [redacted] 35.239.144.1 (US/United States/1.144.239.35.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇬🇷 setupgr	2026-06-15 08:49:29 (2 days ago)	(mod_security) mod_security (id:11000011) triggered by 35.239.144.1: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:11000011) triggered by 35.239.144.1: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 11:49:27.951276 2026] [security2:error] [pid 948989:tid 949025] [client 35.239.144.1:40642] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 1.144.239.35.bc.googleusercontent.com"] [hostname "ftiaxtomonosou.gr"] [uri "/.env.bak"] [unique_id "ai-8l9XD3_cY7WcDuxrV-AAAAIk"] show less	Port Scan
🇩🇪 LRob.fr	2026-06-15 06:00:04 (2 days ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇲🇾 Rizzy	2026-06-15 05:51:33 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-15 05:05:44 (2 days ago)	Abuse Detected (17)	Brute-Force Web App Attack
🇪🇸 pipeline.es	2026-06-15 05:00:26 (2 days ago)	Web scanning / probing for vulnerable paths \| URL: /.env.development \| Evidence: feitoparaviajar.com ... show more Web scanning / probing for vulnerable paths \| URL: /.env.development \| Evidence: feitoparaviajar.com.br 35.239.144.1 - - [15/Jun/2026:06:59:52 +0200] \"GET /.env.development HTTP/1.1\" 404 18767 \"-\" \"BlackBerry8320/4.2.2 Profile/MIDP-2.0 Configuration/CLDC-1.1 VendorID/100\" GEOIP_COUNTRY_CODE=US \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: US show less	Port Scan Web App Attack
🇧🇷 dominioz	2026-06-15 03:32:18 (2 days ago)	2026-06-15 03:32:08 GET /data/.env - - 35.239.144.1 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+ ... show more 2026-06-15 03:32:08 GET /data/.env - - 35.239.144.1 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_14_6)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/53.0.2785.21+Safari/537.36+MMS/1.0.2531.0 - 301 649 2026-06-15 03:32:08 GET /uploads/.env - - 35.239.144.1 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/75.0.3770.80+Safari/537.36 - 301 655 2026-06-15 03:32:08 GET /.env - - 35.239.144.1 HTTP/1.1 Mozilla/5.0+(Linux;+Android+8.1.0;+vivo+1726)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/74.0.3729.157+Mobile+Safari/537.36 - 301 639 2026-06-15 03:32:10 GET /storage/.env - - 35.239.144.1 HTTP/1.1 Mozilla/5.0+(X11;+Ubuntu;+Linux+x86_64)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/11.0+Safari/605.1.15+Epiphany/605.1.15 - 301 655 ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-06-15 03:26:35 (2 days ago)	35.239.144.1 - - [15/Jun/2026:06:26:33 +0300] "GET /.env HTTP/1.1" 404 4664 "-" "Mozilla/5.0 (Linux; ... show more 35.239.144.1 - - [15/Jun/2026:06:26:33 +0300] "GET /.env HTTP/1.1" 404 4664 "-" "Mozilla/5.0 (Linux; Android 9; CLT-L29 Build/HUAWEICLT-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Mobile Safari/537.36 OPR/48.1.2331.132804" 35.239.144.1 - - [15/Jun/2026:06:26:33 +0300] "GET /api/.env HTTP/1.1" 404 4827 "-" "Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Firefox/45.0 SeaMonkey/2.42.9esr" ... show less	Web App Attack
🇫🇷 masterguru	2026-06-15 03:26:31 (2 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇦🇹 penguin-solutions.at	2026-06-15 03:16:07 (2 days ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-15 03:13:02 (2 days ago)	categories: DDoS Attack	DDoS Attack
🇺🇸 TPI-Abuse	2026-06-15 01:03:43 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.239.144.1 (1.144.239.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.239.144.1 (1.144.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:03:35.545498 2026] [security2:error] [pid 26279:tid 26279] [client 35.239.144.1:47482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "normteslaa.com"] [uri "/.env.development"] [unique_id "ai9PZ6WbwnvEGgIOzh8b3gAAADU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 125.212.244.35

🇻🇳 103.82.21.169

🇺🇸 69.117.51.196

🇺🇸 64.62.156.228

🇺🇸 43.162.103.6

🇨🇳 43.143.73.189

🇺🇸 195.184.76.180

🇭🇰 165.154.40.205

🇳🇱 157.245.73.170

🇭🇰 156.245.246.50

🇭🇰 152.32.212.224

🇺🇸 146.148.89.115

🇺🇸 136.119.43.158

🇺🇸 66.132.186.127

🇺🇸 65.49.1.102

🇬🇧 31.14.254.84

🇬🇧 31.14.254.46

🇧🇷 191.9.113.131

🇳🇱 185.65.134.224

🇺🇸 173.194.103.24