Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 35.253.40.20
This IP address has been reported a total of
11
times from
9 distinct
sources.
35.253.40.20 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
France
with 3
reports;
Switzerland
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
8
times;
Web App Attack
3
times;
Hacking
1
time;
DDoS Attack
1
time;
Exploited Host
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:210381) triggered by 35.253.40.20 (20.40.253.35.bc.googleusercontent ...
show more(mod_security) mod_security (id:210381) triggered by 35.253.40.20 (20.40.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 03:54:56.510356 2026] [security2:error] [pid 25249:tid 25249] [client 35.253.40.20:55404] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.menafert.com|F|4"] [data "REQUEST_URI=/uploads/products/Advanced_Mg_9_9%_EDTA_TDS.pdf"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.menafert.com"] [uri "/uploads/products/Advanced_Mg_9_9%_EDTA_TDS.pdf"] [unique_id "arTXULhQO0-H0y9MWlTRSAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=7,6, C ...
show moreFlagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=7,6, CanaryOverride=90.
show less
Automated scraper on a Google Cloud VM (PTR *.bc.googleusercontent.com). Fixed browser UA "Mozilla/5 ...
show moreAutomated scraper on a Google Cloud VM (PTR *.bc.googleusercontent.com). Fixed browser UA "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36". Enumerates faceted-filter URL combinations (?attr_a=x|y&attr_b=z...) of e-commerce category pages at ~3 req/s across hundreds of rotating IPs, in waves (2026-09-18/19, 2026-09-23 from ~20:00 UTC). Caused CPU saturation on the web server. Not a Google service: IP absent from Google's published Googlebot/crawler ranges, no self-identifying UA. Blocked by UA + IP rules.
show less
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show moreThis address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /it/actualites/page/9/ | 2026-09-21 14:45 UTC
show less
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show moreAsking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /de/actualites/page/7/ | 2026-09-20 09:41 UTC
show less
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show moreAsking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-20 05:24 UTC
show less
Bad Web Bot
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
