JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.185.141.157

35.185.141.157 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 92%: ?

92%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	157.141.185.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.185.141.157

Whois 35.185.141.157

IP Abuse Reports for 35.185.141.157:

This IP address has been reported a total of 31 times from 20 distinct sources. 35.185.141.157 was first reported on July 2nd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-03 22:01:39 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-02. show less	Web App Attack SSH Hacking
🇫🇷 Baking333	2026-07-02 22:41:49 (1 week ago)	[redacted] 35.185.141.157 - - [02/Jul/2026:23:41:47 +0100] "GET /.git/config HTTP/1.1" 302 6788 0/48 ... show more [redacted] 35.185.141.157 - - [02/Jul/2026:23:41:47 +0100] "GET /.git/config HTTP/1.1" 302 6788 0/48194 "-" "-" [redacted] 35.185.141.157 - - [02/Jul/2026:23:41:47 +0100] "GET /.git/config HTTP/1.1" 302 6783 0/60313 "-" "-" show less	Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-07-02 22:33:17 (1 week ago)	Triggered Cloudflare WAF (firewallManaged) from TW. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from TW. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-02 22:31:28 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.185.141.157 (157.141.185.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.185.141.157 (157.141.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 18:31:21.594235 2026] [security2:error] [pid 19162:tid 19162] [client 35.185.141.157:58452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kingstoneproperties.sendalawyerletter.com"] [uri "/.git/config"] [unique_id "akbmuSZMv6D7hdJlq38w2gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-07-02 22:23:58 (1 week ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits. show less	Web App Attack
🇩🇪 KiekerJan	2026-07-02 22:20:51 (1 week ago)	35.185.141.157 - - [02/Jul/2026:21:16:14 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "-" 35.185.1 ... show more 35.185.141.157 - - [02/Jul/2026:21:16:14 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "-" 35.185.141.157 - - [03/Jul/2026:00:20:50 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "-" ... show less	Web App Attack
🇩🇪 sdos.es	2026-07-02 22:07:31 (1 week ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
🇩🇪 ketovoila.pl	2026-07-02 22:07:07 (1 week ago)	ketovoila.pl web app secret/repository scan: hits=1; unique_paths=1; sample_paths=/.git/config; UA=" ... show more ketovoila.pl web app secret/repository scan: hits=1; unique_paths=1; sample_paths=/.git/config; UA=""; window=2026-07-02T22:07:07Z..2026-07-02T22:07:07Z show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-02 22:00:49 (1 week ago)	Auto-ban: >3000 req/min op 2026-07-02	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-02 21:57:35 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.185.141.157 (157.141.185.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.185.141.157 (157.141.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 17:57:31.676484 2026] [security2:error] [pid 13166:tid 13166] [client 35.185.141.157:48498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kellerdrywall.ca.kildarafarms.com"] [uri "/.git/config"] [unique_id "akbey0E-G65QVuHpM5mmaQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-02 21:55:32 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.185.141.157 (TW/Taiwan/157.141.1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.185.141.157 (TW/Taiwan/157.141.185.35.bc.googleusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 21:30:04 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.185.141.157 (157.141.185.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.185.141.157 (157.141.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 17:29:59.992393 2026] [security2:error] [pid 15193:tid 15193] [client 35.185.141.157:35294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kaplankrew.royal-barbershop.com"] [uri "/.git/config"] [unique_id "akbYV_V8vFH0pMkmM2tG2wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Ba-Yu	2026-07-02 21:25:15 (1 week ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇷🇴 INTEQ	2026-07-02 21:19:10 (1 week ago)	Web attack from 35.185.141.157	Web App Attack
🇩🇪 FeG Deutschland	2026-07-02 21:16:04 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.228.138

🇵🇦 200.46.177.242

🇺🇸 162.216.150.247

🇺🇸 162.216.149.83

🇺🇸 147.185.132.147

🇺🇸 143.110.205.26

🇳🇱 91.92.40.12

🇷🇺 37.128.240.47

🇭🇰 36.255.220.145

🇬🇧 35.203.210.3

🇺🇦 31.28.253.144

🇺🇸 20.65.192.71

🇹🇷 5.11.162.163

🇦🇺 203.194.5.183

🇻🇪 201.211.247.92

🇧🇷 201.76.120.30

🇺🇸 165.154.163.125

🇳🇱 51.15.59.186

🇩🇪 45.3.45.12

🇧🇪 34.62.28.130