JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.252.214.79

35.252.214.79 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 71%: ?

71%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	79.214.252.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.252.214.79

Whois 35.252.214.79

IP Abuse Reports for 35.252.214.79:

This IP address has been reported a total of 17 times from 11 distinct sources. 35.252.214.79 was first reported on August 26th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-08-28 01:05:17 (3 hours ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-27 22:01:05 (7 hours ago)	Auto-ban: >3000 req/min op 2026-08-27	Web App Attack SSH Hacking
🇩🇪 ghostwarriors	2026-08-27 19:50:36 (9 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-08-27 19:25:04 (9 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 CBJ	2026-08-27 18:45:52 (10 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 18:19:09 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:19:00.652470 2026] [security2:error] [pid 31346:tid 31346] [client 35.252.214.79:37100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.trasimeno.montepulciano.org"] [uri "/public/.git/config"] [unique_id "apB_lITPuOqODWwkCdBzKgAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-27 11:56:49 (17 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 11:36:23 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 07:36:16.969628 2026] [security2:error] [pid 3852:tid 3852] [client 35.252.214.79:45058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ltscatering.com"] [uri "/backend/.git/config"] [unique_id "apAhMASk2mImJ6w-SlxqiAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 07:27:10 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 03:27:05.594704 2026] [security2:error] [pid 9622:tid 9622] [client 35.252.214.79:56332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "resume.marat.info"] [uri "/backend/.git/config"] [unique_id "ao_myaIHV39CNLc48D9yigAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-27 07:19:21 (21 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇩🇪 Vegascosmetics	2026-08-27 07:16:41 (21 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git) show less	Hacking Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-08-27 06:34:44 (22 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇸🇪 nekopavel	2026-08-27 06:02:42 (23 hours ago)	35.252.214.79 - - [27/Aug/2026:08:02:39 +0200]"GET /wordpress/.git/config HTTP/1.1" 404 1456"-" a.re ... show more 35.252.214.79 - - [27/Aug/2026:08:02:39 +0200]"GET /wordpress/.git/config HTTP/1.1" 404 1456"-" a.remnawave.pavel.gg "crusader-worker/1.0""0.000" "-""The Dalles" "US" 35.252.214.79 - - [27/Aug/2026:08:02:39 +0200]"GET /.git/config HTTP/1.1" 404 1456"-" a.remnawave.pavel.gg "crusader-worker/1.0""0.000" "-""The Dalles" "US" 35.252.214.79 - - [27/Aug/2026:08:02:39 +0200]"GET /app/.git/config HTTP/1.1" 404 1456"-" a.remnawave.pavel.gg "crusader-worker/1.0""0.000" "-""The Dalles" "US" ... show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 01:56:58 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 21:56:52.799260 2026] [security2:error] [pid 11429:tid 11429] [client 35.252.214.79:48296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "editions.click"] [uri "/.git/config"] [unique_id "ao-ZZAyIe7Q9ntQSNtutiQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 01:23:15 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.252.214.79 (79.214.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 21:23:11.349728 2026] [security2:error] [pid 1297:tid 1297] [client 35.252.214.79:40960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.market.nationalenq.com"] [uri "/htdocs/.git/config"] [unique_id "ao-Rf7deetMgiTfGOZewhAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 200.112.142.188

🇧🇷 179.109.45.104

🇧🇷 170.238.191.110

🇭🇰 144.86.173.178

🇩🇪 91.92.43.121

🇺🇸 44.252.91.119

🇺🇸 40.76.127.67

🇨🇳 27.29.16.221

🇨🇳 27.22.72.210

🇺🇿 213.230.78.55

🇱🇹 213.176.26.194

🇦🇷 200.59.121.15

🇲🇽 189.203.45.63

🇫🇷 185.187.169.232

🇧🇷 177.135.9.77

🇮🇱 176.106.227.18

🇵🇱 176.53.159.197

🇺🇸 172.234.246.109

🇻🇳 171.251.237.245

🇱🇾 165.16.28.187