JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.194.117.139

35.194.117.139 was found in our database!

This IP was reported 73 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	139.117.194.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.194.117.139

Whois 35.194.117.139

IP Abuse Reports for 35.194.117.139:

This IP address has been reported a total of 73 times from 63 distinct sources. 35.194.117.139 was first reported on July 20th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 David Koswari	2026-07-22 05:09:00 (9 hours ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇨🇱 SinaiCL	2026-07-22 03:55:13 (10 hours ago)	WAF Multiple Hits	Bad Web Bot Web App Attack
🇫🇷 IRISIO	2026-07-21 10:46:45 (1 day ago)	scans/SQL injection/spam posts : 452 queries	Web App Attack SQL Injection
🇮🇳 evicky2002	2026-07-21 06:00:00 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-21 02:10:48 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.194.117.139 (139.117.194.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.194.117.139 (139.117.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 22:10:44.827539 2026] [security2:error] [pid 21433:tid 21433] [client 35.194.117.139:53500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.marionenv.com"] [uri "/.git/config"] [unique_id "al7VJPp7oUmFyLND5YYaUgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-21 02:09:14 (1 day ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-21 02:08:24 (1 day ago)	Automatically blocked after 7 security events. Observed sensitive configuration-file probes. Source: ... show more Automatically blocked after 7 security events. Observed sensitive configuration-file probes. Source: Cloudflare security controls. show less	Hacking Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-07-21 01:43:56 (1 day ago)	cloudlinux2 fail2ban: 2026-07-21 03:39:33,917 fail2ban.filter [1927]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-21 03:39:33,917 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 45.131.193.86 - 2026-07-21 03:39:33cloudlinux2 fail2ban: 2026-07-21 03:41:36,358 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 34.181.144.64 - 2026-07-21 03:41:36cloudlinux2 fail2ban: 2026-07-21 03:43:17,949 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 35.194.117.139 - 2026-07-21 03:43:17cloudlinux2 fail2ban: 2026-07-21 03:43:17,708 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 35.194.117.139 - 2026-07-21 03:43:17cloudlinux2 fail2ban: 2026-07-21 03:43:17,967 fail2ban.actions [1927]: NOTICE [plesk-modsecurity] Ban 35.194.117.139cloudlinux2 fail2ban: 2026-07-21 03:43:17,695 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 35.194.117.139 - 2026-07-21 03:43:17cloudlinux2 fail2ban: 2026-07-21 03:43:17,731 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 35.194.117.139 - 2026-07-21 03:43:17cloudlinux2 fail show less	Web App Attack
🇳🇱 Roderic	2026-07-21 01:40:27 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇫🇷 Octopuce	2026-07-21 01:39:31 (1 day ago)	Aggressive web search of vulnerable pages: /admin/.env /backend/.env /api/.env /.env.local /config/. ... show more Aggressive web search of vulnerable pages: /admin/.env /backend/.env /api/.env /.env.local /config/.env ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 01:35:31 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 35.194.117.139 (139.117.194.35.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 35.194.117.139 (139.117.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 21:35:24.773072 2026] [security2:error] [pid 25988:tid 26012] [client 35.194.117.139:50480] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pizzadlux.com\|F\|2"] [data ".pizzadlux.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pizzadlux.com"] [uri "/z9x8c7v6b5-debug-trigger-www.pizzadlux.com"] [unique_id "al7M3HjOv25iKj7sjpxdYgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-07-21 01:08:22 (1 day ago)	[ISILIA Protection v2.1] Tentative d'accès: /backend/.env \| Pays: JP \| UA: Mozilla/5.0 AppleWebKit/5 ... show more [ISILIA Protection v2.1] Tentative d'accès: /backend/.env \| Pays: JP \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.c show less	Hacking Web App Attack
🇬🇧 andypiper	2026-07-21 01:01:57 (1 day ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇷 Quarks Solutions	2026-07-21 01:00:14 (1 day ago)	crowdsecurity/appsec-vpatch	Web App Attack
Anonymous	2026-07-21 00:59:48 (1 day ago)	Sensitive file access attempt	Hacking

Showing 1 to 15 of 73 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.159

🇺🇦 176.98.89.88

🇭🇰 103.43.191.43

🇩🇪 89.57.103.88

🇳🇱 45.148.10.141

🇫🇷 217.76.50.138

🇮🇩 180.247.57.155

🇮🇳 128.185.207.18

🇨🇳 113.214.18.234

🇺🇸 74.249.219.123

🇧🇷 45.163.117.154

🇹🇷 185.226.92.175

🇬🇧 165.227.231.42

🇩🇪 128.14.225.164

🇫🇷 51.91.97.236

🇺🇸 195.184.76.63

🇳🇱 172.71.182.50

🇳🇱 172.71.99.225

🇳🇱 172.71.95.94

🇺🇸 135.237.122.43