JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.252.232.13

35.252.232.13 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 77%: ?

77%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	13.232.252.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.252.232.13

Whois 35.252.232.13

IP Abuse Reports for 35.252.232.13:

This IP address has been reported a total of 18 times from 13 distinct sources. 35.252.232.13 was first reported on August 27th 2026, and the most recent report was 53 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 08:43:26 (53 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.252.232.13 (13.232.252.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.252.232.13 (13.232.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:43:21.979949 2026] [security2:error] [pid 32550:tid 32550] [client 35.252.232.13:33076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ionlineshopper.com"] [uri "/htdocs/.git/config"] [unique_id "apaQKd-cf63T7fdzpv9h3AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-01 06:28:22 (3 hours ago)	20 attempts against mh-misbehave-ban on redirect	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-31 17:38:12 (15 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-31 17:27:17 (16 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 maxxsense	2026-08-31 00:10:24 (1 day ago)	(CT) IP 35.252.232.13 (US/United States/13.232.252.35.bc.googleusercontent.com) found to have 485 co ... show more (CT) IP 35.252.232.13 (US/United States/13.232.252.35.bc.googleusercontent.com) found to have 485 connections show less	DDoS Attack
🇺🇸 TPI-Abuse	2026-08-29 23:39:03 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.252.232.13 (13.232.252.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.252.232.13 (13.232.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 19:38:58.281172 2026] [security2:error] [pid 15096:tid 15096] [client 35.252.232.13:37192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brexitop.bamedica.com"] [uri "/html/.git/config"] [unique_id "apNtkl9W6TeGfP9ojnwHvwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 brantknudson.org	2026-08-29 22:20:36 (2 days ago)	Request path 'GET /var/www/.git/config HTTP/1.1'	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-08-28 22:00:58 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-28 15:23:04 (3 days ago)	(mod_security) mod_security (id:949110) triggered by 35.252.232.13 (13.232.252.35.bc.googleuserconte ... show more (mod_security) mod_security (id:949110) triggered by 35.252.232.13 (13.232.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 11:22:57.567304 2026] [security2:error] [pid 32408:tid 32408] [client 35.252.232.13:45292] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "toxicnation.org"] [uri "/access.log"] [unique_id "apGn0bWmwyr3ug9pyZSjXwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-08-27 23:29:23 (4 days ago)	Too many 404 requests [BY]	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-27 21:59:54 (4 days ago)	Auto-ban: >3000 req/min op 2026-08-27	Web App Attack SSH Hacking
🇦🇺 Klaverstyn	2026-08-27 18:31:13 (4 days ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking
🇳🇱 e.fierstra	2026-08-27 18:15:45 (4 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 16:35:19 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.252.232.13 (13.232.252.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.252.232.13 (13.232.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:35:10.834224 2026] [security2:error] [pid 20441:tid 20441] [client 35.252.232.13:43408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.nutandboltguy.com"] [uri "/api/.git/config"] [unique_id "apBnPiwkysxIteezhvKjzgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-27 16:10:04 (4 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 211.155.100.9

🇷🇴 193.46.255.151

🇩🇪 167.94.146.40

🇹🇭 152.32.245.27

🇵🇱 109.205.211.110

🇮🇳 103.212.88.146

🇫🇷 85.217.140.7

🇱🇻 62.60.130.242

🇺🇸 20.80.74.79

🇩🇪 69.5.169.62

🇺🇸 45.131.195.150

🇭🇰 2404:6800:4005:c01::121

🇩🇪 144.76.22.229

🇫🇷 91.231.89.133

🇺🇸 13.89.120.172

🇸🇬 2404:6800:4003:c06::121

🇬🇧 209.42.18.223

🇬🇧 195.206.182.197

🇺🇸 195.184.76.247

🇫🇮 150.241.89.181