JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.239.214.72

35.239.214.72 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 84%: ?

84%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	72.214.239.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.239.214.72

Whois 35.239.214.72

IP Abuse Reports for 35.239.214.72:

This IP address has been reported a total of 16 times from 16 distinct sources. 35.239.214.72 was first reported on September 14th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-09-14 15:05:52 (6 days ago)	Abuse Detected (16)	Brute-Force Web App Attack
🇩🇪 YF	2026-09-14 15:00:17 (6 days ago)	WordPress author enumeration	Web App Attack
🇳🇱 Site.eu	2026-09-14 14:49:34 (6 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-09-14 14:49:03 (6 days ago)	Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1	Hacking Web App Attack
Anonymous	2026-09-14 14:45:58 (6 days ago)	2026-09-14T14:45:57.372985+00:00 instance-20260804-1025 wordpress(jumarpab.co)[2864440]: Blocked use ... show more 2026-09-14T14:45:57.372985+00:00 instance-20260804-1025 wordpress(jumarpab.co)[2864440]: Blocked user enumeration attempt from 35.239.214.72 ... show less	Web App Attack
🇷🇴 iulianh	2026-09-14 14:43:27 (6 days ago)	80,443	Brute-Force SSH
🇵🇱 TaKeN	2026-09-14 14:43:12 (6 days ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching blocked event(s) between 2026-09-14T16:43:12+02:00 and 2026-09-14T16:43:12+02:00. Sample requested paths: //media/wp-includes/wlwmanifest.xml. show less	Web App Attack Hacking
🇭🇺 bcsaba	2026-09-14 14:41:59 (6 days ago)	Repeated request on blocked xmlrpc.php. 35.239.214.72 - - [14/Sep/2026:16:41:57 +0200] "POST //xmlrp ... show more Repeated request on blocked xmlrpc.php. 35.239.214.72 - - [14/Sep/2026:16:41:57 +0200] "POST //xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Web App Attack
🇩🇪 FeG Deutschland	2026-09-14 14:40:32 (6 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇮🇹 VHosting	2026-09-14 14:40:04 (6 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇮🇱 Dolphi	2026-09-14 14:40:02 (6 days ago)	POST //xmlrpc.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-14 14:39:21 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 35.239.214.72 (72.214.239.35.bc.googleuserconte ... show more (mod_security) mod_security (id:225170) triggered by 35.239.214.72 (72.214.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:39:17.193216 2026] [security2:error] [pid 32565:tid 32565] [client 35.239.214.72:52584] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jaragoodrich.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jaragoodrich.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqgHFRTFT1Md8fsfHrUxpAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-14 14:36:00 (6 days ago)	[redacted] 35.239.214.72 - - [14/Sep/2026:16:35:53 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ... show more [redacted] 35.239.214.72 - - [14/Sep/2026:16:35:53 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 35.239.214.72 - - [14/Sep/2026:16:35:54 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 35.239.214.72 - - [14/Sep/2026:16:35:55 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 35.239.214.72 - - [14/Sep/2026:16:35:55 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 35.239.214.72 - - [14/Sep/2026:16:35:56 +0200] "POST //xmlrpc.php HTTP/1.1" 200 41 ... show less	Hacking Web App Attack
🇫🇷 masterguru	2026-09-14 14:35:50 (6 days ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇳🇴 jad-abuse	2026-09-14 14:07:14 (6 days ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: scanner_u ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: scanner_ua. Observed by 1 sensor(s); 2 hits. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.81.216.54

🇬🇧 185.216.145.180

🇳🇱 176.65.148.71

🇺🇸 173.72.116.37

🇺🇸 147.185.132.82

🇺🇸 147.93.133.30

🇵🇰 122.129.88.19

🇵🇰 119.73.3.97

🇨🇳 115.191.23.138

🇵🇰 115.186.179.34

🇨🇳 111.29.38.32

🇨🇦 85.217.149.64

🇺🇸 66.132.172.134

🇸🇬 47.128.44.84

🇬🇧 2a06:4880::1c

🇸🇬 207.166.172.198

🇨🇳 150.158.40.98

🇬🇷 147.102.18.101

🇨🇦 85.217.149.51

🇮🇹 57.131.17.114