JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.253.144.72

35.253.144.72 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	72.144.253.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.253.144.72

Whois 35.253.144.72

IP Abuse Reports for 35.253.144.72:

This IP address has been reported a total of 24 times from 21 distinct sources. 35.253.144.72 was first reported on July 29th 2026, and the most recent report was 40 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Holger	2026-07-29 23:40:01 (40 seconds ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-29 23:29:49 (10 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.253.144.72 (72.144.253.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.253.144.72 (72.144.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 19:29:44.919141 2026] [security2:error] [pid 1471645:tid 1471702] [client 35.253.144.72:49940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "api.neotienda.com"] [uri "/.git/config"] [unique_id "amqM6DEYxO6aAV6IbLExqwAAAFM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-07-29 21:02:30 (2 hours ago)	(PERMBLOCK) 35.253.144.72 (US/United States/Iowa/Council Bluffs/72.144.253.35.bc.googleusercontent.c ... show more (PERMBLOCK) 35.253.144.72 (US/United States/Iowa/Council Bluffs/72.144.253.35.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks show less	Hacking
🇩🇪 FutureFm	2026-07-29 20:06:00 (3 hours ago)	35.253.144.72 - - [29/Jul/2026:21:53:47 +0200] "GET /admin 35.253.144.72 - - [29/Jul/2026:21:53:47 ... show more 35.253.144.72 - - [29/Jul/2026:21:53:47 +0200] "GET /admin 35.253.144.72 - - [29/Jul/2026:21:53:47 +0200] "GET /.gitconfig 35.253.144.72 - - [29/Jul/2026:21:53:47 +0200] "GET /.gitlab-ci.yml 35.253.144.72 - - [29/Jul/2026:21:53:48 +0200] "POST /graphql 35.253.144.72 - - [29/Jul/2026:21:53:48 +0200] "GET /.svn/entries 35.253.144.72 - - [29/Jul/2026:21:53:48 +0200] "GET /firebase-adminsdk.json 35.253.144.72 - - [29/Jul/2026:21:53:48 +0200] "GET /service-account.json 35.253.144.72 - - [29/Jul/2026:21:53:48 +0200] "GET /credentials.json 35.253.144.72 - - [29/Jul/2026:21:53:48 +0200] "GET /.s3cfg 35.253.144.72 - - [29/Jul/2026:21:53:49 +0200] "GET /.htpasswd show less	Brute-Force Hacking
🇨🇭 zynex	2026-07-29 18:30:12 (5 hours ago)	URL Probing: /.env	Web App Attack
🇳🇱 Savvii	2026-07-29 18:12:54 (5 hours ago)	20 attempts against mh-misbehave-ban on yeti	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-07-29 18:07:26 (5 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: aws_creds ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: aws_creds, git_exposure, env_probe, ai_secrets, actuator, config_backup, source_backup, path_traversal. Observed by 1 sensor(s); 290 hits. show less	Hacking Web App Attack
🇳🇱 Mangelot Hosting	2026-07-29 17:53:26 (5 hours ago)	(modsecurity) srv104 ModSecurity 35.253.144.72 (US/United States/72.144.253.35.bc.googleusercontent. ... show more (modsecurity) srv104 ModSecurity 35.253.144.72 (US/United States/72.144.253.35.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇬🇧 noise.agency	2026-07-29 17:51:35 (5 hours ago)	35.253.144.72 (US/United States/72.144.253.35.bc.googleusercontent.com), more than 10 Apache 403 hit ... show more 35.253.144.72 (US/United States/72.144.253.35.bc.googleusercontent.com), more than 10 Apache 403 hits show less	Hacking
🇫🇷 mail.avx.gr	2026-07-29 17:43:35 (5 hours ago)	Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: default-10-0-0-4:443 35.253.144.72 - - [29/Jul/202 ... show more Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: default-10-0-0-4:443 35.253.144.72 - - [29/Jul/2026:20:43:34 +0300] "GET /console HTTP/1.1" 404 2429 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 NewGastroline	2026-07-29 16:59:40 (6 hours ago)	Malicious request blocked by CrowdSec on gastro-prod1.boreus.de	Bad Web Bot Web App Attack
🇵🇱 TaKeN	2026-07-29 16:54:04 (6 hours ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 4 matching blocked event(s) between 2026-07-29T18:54:04+02:00 and 2026-07-29T18:54:04+02:00. Sample requested paths: /api/health, /api/v1/config, /actuator, /secrets.yml. show less	Web App Attack Hacking
🇳🇱 Savvii	2026-07-29 16:31:36 (7 hours ago)	20 attempts against mh-misbehave-ban on ec102967	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-29 16:27:52 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
Anonymous	2026-07-29 16:13:54 (7 hours ago)	35.253.144.72 - - [29/Jul/2026:18:13:46 +0200] "GET /config.json HTTP/2.0" 403 294 "-" "Mozilla/5.0 ... show more 35.253.144.72 - - [29/Jul/2026:18:13:46 +0200] "GET /config.json HTTP/2.0" 403 294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; show less	Web Spam Blog Spam Brute-Force Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 212.56.48.35

🇭🇰 199.45.154.136

🇵🇱 176.53.159.54

🇨🇳 111.37.32.35

🇩🇪 103.252.90.129

🇺🇸 66.132.195.126

🇳🇱 45.148.10.157

🇬🇧 35.203.210.147

🇨🇴 191.97.12.90

🇺🇸 165.227.110.45

🇨🇳 124.117.195.128

🇨🇳 117.35.119.58

🇨🇳 116.179.32.94

🇹🇼 114.34.106.146

🇺🇸 45.92.229.80

🇺🇸 2604:a880:400:d1:0:4:c23c:6001

🇳🇱 195.178.110.217

🇧🇷 187.69.66.79

🇮🇳 159.65.152.186

🇺🇸 107.172.43.200