JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.252.96.23

35.252.96.23 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	23.96.252.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.252.96.23

Whois 35.252.96.23

IP Abuse Reports for 35.252.96.23:

This IP address has been reported a total of 22 times from 19 distinct sources. 35.252.96.23 was first reported on June 13th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-06-16 00:05:53 (17 hours ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 homeshowdomain.nl	2026-06-15 22:01:34 (20 hours ago)	Auto-ban: >3000 req/min op 2026-06-15	Web App Attack SSH Hacking
🇨🇭 zynex	2026-06-15 09:29:48 (1 day ago)	URL Probing: /symfony/.env	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-15 09:07:02 (1 day ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-06-15 08:42:03 (1 day ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
🇳🇱 e.fierstra	2026-06-15 08:06:01 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇵🇱 dcnet	2026-06-15 06:00:50 (1 day ago)	FortiGate detected DOS attack from IPv4 address 35.252.96.23	DDoS Attack
🇧🇪 cmbplf	2026-06-15 05:37:17 (1 day ago)	502 requests with url.path *.env	Brute-Force Bad Web Bot
🇨🇭 🇨🇭 Hosting	2026-06-15 05:10:29 (1 day ago)	Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 04:31:17 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.252.96.23 (23.96.252.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.252.96.23 (23.96.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:31:14.122209 2026] [security2:error] [pid 31967:tid 31967] [client 35.252.96.23:41446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idmadventures.com"] [uri "/.env.live"] [unique_id "ai-AEg09LKCq5eX6DY4JeQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-15 04:06:19 (1 day ago)	Abuse Detected (79)	Brute-Force Web App Attack
Anonymous	2026-06-15 03:50:10 (1 day ago)	Aggressive web scan	Web App Attack
🇬🇧 consul.to	2026-06-15 03:29:54 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-15 02:21:02 (1 day ago)	Bot / scanning and/or hacking attempts: GET /backend/api/.env HTTP/1.1, GET /app/.env HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /backend/api/.env HTTP/1.1, GET /app/.env HTTP/1.1, GET /staging/.env HTTP/1.1, GET /v2/.env HTTP/1.1, GET /app/.env.local HTTP/1.1, GET /.env.production.local HTTP/1.1, GET /dashboard/.env HTTP/1.1, GET /temp/.env HTTP/1.1, GET /src/.env HTTP/1.1, GET /laravel/.env HTTP/1.1, GET /.env.dev HTTP/1.1, GET /html/.env HTTP/1.1, GET /app/.env.bak HTTP/1.1, GET /app/.env.backup HTTP/1.1, GET /server/.env.backup HTTP/1.1, GET /server/.env.production HTTP/1.1, GET /admin/api/.env HTTP/1.1, GET /wp/.env HTTP/1.1 show less	Hacking Web App Attack
🇸🇪 konseptit	2026-06-14 22:15:42 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 35.252.96.23 (US/United States/23.96.25 ... show more (mod_security) mod_security triggered on hostname [redacted] 35.252.96.23 (US/United States/23.96.252.35.bc.googleusercontent.com) show less	SQL Injection

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.74.93.184

🇺🇸 198.98.56.227

🇮🇳 122.176.117.147

🇮🇳 122.160.80.105

🇺🇸 100.29.192.13

🇩🇪 88.214.25.125

🇺🇸 69.63.198.189

🇺🇸 66.132.224.82

🇺🇸 66.132.172.45

🇩🇪 52.59.207.103

🇺🇸 16.144.252.220

🇰🇷 14.46.58.104

🇳🇱 176.65.132.22

🇻🇳 171.244.60.35

🇩🇪 165.245.250.240

🇯🇵 160.251.233.185

🇺🇸 154.219.125.148

🇹🇼 111.70.9.143

🇺🇸 64.62.156.10

🇨🇳 45.120.100.166