JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.242.202.79

35.242.202.79 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	79.202.242.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.242.202.79

Whois 35.242.202.79

IP Abuse Reports for 35.242.202.79:

This IP address has been reported a total of 36 times from 30 distinct sources. 35.242.202.79 was first reported on June 9th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-06-10 18:26:05 (2 hours ago)	[WedJun1020:26:00.5857512026][security2:error][pid3417846:tid3418077][client35.242.202.79:0]ModSecur ... show more [WedJun1020:26:00.5857512026][security2:error][pid3417846:tid3418077][client35.242.202.79:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.avvocato.urbani.ch\"][uri\"/actuator/httptrace\"][unique_id\"aimsODJ4GDkI7CKmALSfGAAAAQ8\"] show less	Hacking Web App Attack
Anonymous	2026-06-10 18:11:34 (2 hours ago)	(caddyscan) Scanner path probe from 35.242.202.79 (DE/Germany/79.202.242.35.bc.googleusercontent.com ... show more (caddyscan) Scanner path probe from 35.242.202.79 (DE/Germany/79.202.242.35.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 35.242.202.79 - - [10/Jun/2026:18:11:31 +0000] "GET /backend/actuator/heapdump HTTP/1.1" [REDACTED] 200 2627 35.242.202.79 - - [10/Jun/2026:18:11:31 +0000] "GET /backend/actuator/configprops HTTP/1.1" [REDACTED] 200 2627 35.242.202.79 - - [10/Jun/2026:18:11:31 +0000] "GET /.aws/credentials HTTP/1.1" [REDACTED] 200 2627 35.242.202.79 - - [10/Jun/2026:18:11:31 +0000] "GET /server/actuator/heapdump HTTP/1.1" [REDACTED] 200 2627 35.242.202.79 - - [10/Jun/2026:18:11:31 +0000] "GET /actuator/threaddump HTTP/1.1" show less	Port Scan
🇩🇪 FeG Deutschland	2026-06-10 16:03:05 (4 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇪🇸 elcruzado.es	2026-06-10 10:39:41 (10 hours ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 35.242.202.79 (DE/German ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 35.242.202.79 (DE/Germany/79.202.242.35.bc.googleusercontent.com) show less	Port Scan
🇫🇷 masterguru	2026-06-10 04:15:47 (16 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.242.202.79 (DE/Germany/79.202.242. ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.242.202.79 (DE/Germany/79.202.242.35.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇳🇱 Bouncer	2026-06-10 01:30:53 (19 hours ago)	(mod_security) mod_security (id:210730) triggered by 35.242.202.79 (DE/Germany/79.202.242.35.bc.goog ... show more (mod_security) mod_security (id:210730) triggered by 35.242.202.79 (DE/Germany/79.202.242.35.bc.googleusercontent.com): 5 in the last 60 secs show less	Brute-Force
🇧🇪 cmbplf	2026-06-10 01:09:47 (19 hours ago)	2.058 requests from abuseipdb.com blacklisted IP (4mos2w6d)	Brute-Force Bad Web Bot
🇬🇧 andypiper	2026-06-10 01:00:59 (19 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-10 00:15:35 (20 hours ago)	(mod_security) mod_security (id:210730) triggered by 35.242.202.79 (79.202.242.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 35.242.202.79 (79.202.242.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 20:15:29.986055 2026] [security2:error] [pid 20540:tid 20540] [client 35.242.202.79:41794] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|midway-island.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "midway-island.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiisod8XTeVPcjwsNhebOAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-06-09 23:59:30 (20 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
Anonymous	2026-06-09 23:53:29 (21 hours ago)	35.242.202.79 - - [10/Jun/2026:01:53:26 +0200] "GET /actuator/dump HTTP/1.1" 403 7656 "-" "Mozilla/5 ... show more 35.242.202.79 - - [10/Jun/2026:01:53:26 +0200] "GET /actuator/dump HTTP/1.1" 403 7656 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36" 35.242.202.79 - - [10/Jun/2026:01:53:26 +0200] "GET /actuator/configprops HTTP/1.1" 403 7656 "-" "Mozilla/5.0 (Linux; Android 9; SAMSUNG SM-G965F Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36" 35.242.202.79 - - [10/Jun/2026:01:53:26 +0200] "GET /actuator/httptrace HTTP/1.1" 403 7656 "-" "Mozilla/5.0 (PlayBook; U; RIM Tablet OS 2.1.0; en-US) AppleWebKit/536.2+ (KHTML like Gecko) Version/7.2.1.0 Safari/536.2+" 35.242.202.79 - - [10/Jun/2026:01:53:26 +0200] "GET /actuator/threaddump HTTP/1.1" 403 7656 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12F70 Safari/600.1.4" 35.242.202.79 - - [10/Jun/2026:01:53:26 +0200] "GET /actuator/audit ... show less	DDoS Attack
🇩🇪 gamingkante.xyz	2026-06-09 23:10:36 (21 hours ago)	[Wed Jun 10 01:10:35.524041 2026] [php:error] [pid 1352238:tid 1352238] [client 35.242.202.79:60778] ... show more [Wed Jun 10 01:10:35.524041 2026] [php:error] [pid 1352238:tid 1352238] [client 35.242.202.79:60778] script '/var/www/html/web/phpinfo.php' not found or unable to stat [Wed Jun 10 01:10:35.530425 2026] [php:error] [pid 1352239:tid 1352239] [client 35.242.202.79:60794] script '/var/www/html/web/info.php' not found or unable to stat [Wed Jun 10 01:10:35.541118 2026] [php:error] [pid 1352343:tid 1352343] [client 35.242.202.79:60808] script '/var/www/html/web/php.php' not found or unable to stat [Wed Jun 10 01:10:35.548598 2026] [php:error] [pid 1352235:tid 1352235] [client 35.242.202.79:60822] script '/var/www/html/web/debug.php' not found or unable to stat [Wed Jun 10 01:10:35.559968 2026] [php:error] [pid 1352236:tid 1352236] [client 35.242.202.79:60826] script '/var/www/html/web/phptest.php' not found or unable to stat [Wed Jun 10 01:10:36.060628 2026] [php:error] [pid 1352239:tid 1352239] [client 35.242.202.79:33338] script '/var/www/html/web/config.php' not found or unable to stat ... show less	Web App Attack
🇺🇸 jormaster3k	2026-06-09 22:06:16 (22 hours ago)	Attack against Apache (too many 404s)	Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-06-09 20:49:20 (1 day ago)	[Tue Jun 09 14:49:19.912909 2026] [authz_core:error] [pid 89447:tid 140134750074432] [client 35.242. ... show more [Tue Jun 09 14:49:19.912909 2026] [authz_core:error] [pid 89447:tid 140134750074432] [client 35.242.202.79:47480] AH01630: client denied by server configuration: /var/www/horde/config/.aws [Tue Jun 09 14:49:19.916526 2026] [authz_core:error] [pid 89447:tid 140134716503616] [client 35.242.202.79:47496] AH01630: client denied by server configuration: /var/www/horde/config/aws.json [Tue Jun 09 14:49:19.922528 2026] [authz_core:error] [pid 96502:tid 140135614096960] [client 35.242.202.79:47512] AH01630: client denied by server configuration: /var/www/horde/config/service-account.json ... show less	Bad Web Bot
Anonymous	2026-06-09 19:35:19 (1 day ago)	Bot / seems abusive / Apache connections: 149	DDoS Attack Web Spam Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇧🇷 205.210.31.196

🇧🇷 201.17.133.138

🇮🇳 182.95.63.10

🇺🇸 162.216.149.49

🇦🇷 129.224.215.29

🇮🇳 116.72.198.232

🇧🇷 205.210.31.201

🇺🇸 198.211.106.83

🇫🇷 85.217.140.8

🇲🇾 47.250.189.20

🇺🇸 23.23.104.107

🇺🇸 195.184.76.210

🇫🇮 172.83.255.117

🇮🇩 125.161.227.44

🇿🇦 105.244.19.56

🇩🇿 105.98.204.232

🇫🇷 91.231.89.211

🇺🇦 88.154.84.97

🇰🇷 59.24.133.197