JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.198.13.142

35.198.13.142 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 73%: ?

73%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	142.13.198.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.198.13.142

Whois 35.198.13.142

IP Abuse Reports for 35.198.13.142:

This IP address has been reported a total of 32 times from 21 distinct sources. 35.198.13.142 was first reported on March 9th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-27 22:01:29 (4 days ago)	Auto-ban: >3000 req/min op 2026-08-27	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-27 13:45:26 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:45:21.066746 2026] [security2:error] [pid 18405:tid 18405] [client 35.198.13.142:45350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bernsteinip.com"] [uri "/html/.git/config"] [unique_id "apA_cTgO93XmSNNvE_r2tgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-08-27 13:22:24 (4 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 13:06:28 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:06:19.989310 2026] [security2:error] [pid 17933:tid 17933] [client 35.198.13.142:41552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "step1nutrition.com"] [uri "/public/.git/config"] [unique_id "apA2S28NqQmh32SJhCVvbwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-27 12:10:36 (4 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 11:56:54 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 07:56:50.472982 2026] [security2:error] [pid 2278205:tid 2278265] [client 35.198.13.142:42938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.metrobaselexpoforum.org.metropolitanbasel.org"] [uri "/src/.git/config"] [unique_id "apAmAuKMkSny_ZVB3hf1NQAAAZg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 10:40:52 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 06:40:45.284433 2026] [security2:error] [pid 7584:tid 7601] [client 35.198.13.142:58440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catslife.net.piazza9.com"] [uri "/site/.git/config"] [unique_id "apAULedLh70wV_LX9lix8AAAAI8"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 dominioz	2026-08-27 09:21:54 (4 days ago)	2026-08-27 09:21:36 GET /site/.git/config - - 35.198.13.142 HTTP/1.1 crusader-worker/1.0 - 301 483 2 ... show more 2026-08-27 09:21:36 GET /site/.git/config - - 35.198.13.142 HTTP/1.1 crusader-worker/1.0 - 301 483 2026-08-27 09:21:36 GET /wordpress/.git/config - - 35.198.13.142 HTTP/1.1 crusader-worker/1.0 - 301 493 2026-08-27 09:21:36 GET /html/.git/config - - 35.198.13.142 HTTP/1.1 crusader-worker/1.0 - 301 483 2026-08-27 09:21:36 GET /public/.git/config - - 35.198.13.142 HTTP/1.1 crusader-worker/1.0 - 301 487 ... show less	Web App Attack
🇫🇷 dynamix	2026-08-27 09:17:05 (4 days ago)	Multiple WAF Violations	Web App Attack
🇳🇱 e.fierstra	2026-08-27 08:38:20 (4 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 07:55:03 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.198.13.142 (142.13.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 03:54:57.886698 2026] [security2:error] [pid 5950:tid 5950] [client 35.198.13.142:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "365soft.top"] [uri "/app/.git/config"] [unique_id "ao_tUYnD-yoINQaQoc9bbAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 poundawebsiteltd	2026-08-27 05:51:06 (4 days ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.198.13. ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.198.13.142 (BR/Brazil/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 35.198.13.142 (BR/Brazil/142.13.198.35.bc.googleusercontent.com): 20 in the last 3600 secs show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-08-27 00:34:03 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 stinpriza	2026-08-26 23:06:00 (5 days ago)	common Web Exploits being scanned	Web App Attack
🇺🇸 mnsf	2026-08-26 23:05:27 (5 days ago)	Scanning/Probing (24)	Brute-Force Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 209.50.183.216

🇺🇸 107.170.51.74

🇧🇷 43.135.211.148

🇬🇧 5.226.140.45

🇵🇰 223.123.16.238

🇳🇱 192.142.28.77

🇻🇳 171.231.199.23

🇺🇸 152.32.205.228

🇹🇷 94.154.43.122

🇬🇧 81.19.219.194

🇮🇩 69.5.20.232

🇺🇸 65.49.1.155

🇺🇸 54.87.37.230

🇺🇸 45.194.67.44

🇵🇰 39.35.95.62

🇬🇧 31.14.254.14

🇬🇧 31.14.254.9

🇰🇷 221.158.241.27

🇹🇼 198.235.24.87

🇺🇸 195.184.76.39