JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.198.3.220

35.198.3.220 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	220.3.198.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.198.3.220

Whois 35.198.3.220

IP Abuse Reports for 35.198.3.220:

This IP address has been reported a total of 30 times from 23 distinct sources. 35.198.3.220 was first reported on September 15th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Séfora Srl	2026-09-17 03:49:13 (4 hours ago)	crowdsecurity/http-sensitive-files detected by CrowdSec	Web App Attack
🇵🇱 Budyn	2026-09-16 16:44:48 (15 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.dont-eat-the-pudding.online \| URI: /.git/config \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇩🇪 DEV-DNS	2026-09-16 12:45:25 (19 hours ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇺🇸 TPI-Abuse	2026-09-16 11:38:21 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.198.3.220 (220.3.198.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.198.3.220 (220.3.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 07:38:17.975402 2026] [security2:error] [pid 16006:tid 16006] [client 35.198.3.220:39648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.doncody.disio.com"] [uri "/.git/config"] [unique_id "aqp_qZs37AoqPfEcF9519AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-09-16 11:02:41 (21 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 10:39:42 (21 hours ago)	(mod_security) mod_security (id:949110) triggered by 35.198.3.220 (220.3.198.35.bc.googleusercontent ... show more (mod_security) mod_security (id:949110) triggered by 35.198.3.220 (220.3.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:39:35.255570 2026] [security2:error] [pid 6992:tid 6992] [client 35.198.3.220:42768] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.donate.freedrm.org"] [uri "/.git/config"] [unique_id "aqpx59kaUrIo7zSiTdWh0QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-16 09:24:11 (23 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-16 08:45:02 (23 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇩🇪 4server	2026-09-16 08:20:56 (1 day ago)	[WedSep1610:20:53.9261522026][security2:error][pid300159:tid300229][client35.198.3.220:0]ModSecurity ... show more [WedSep1610:20:53.9261522026][security2:error][pid300159:tid300229][client35.198.3.220:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.domoticaswiss.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"aqpRZXQoOr-1U3CscbD82QAAAIY\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 webko.si	2026-09-16 07:36:05 (1 day ago)	DKK: Bruteforce web app access, URI detail: '/.git/config'.	Web App Attack
🇩🇪 netclix.gr	2026-09-16 05:18:12 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 35.198.3.220 (BR/Brazil/220.3.198.35.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 35.198.3.220 (BR/Brazil/220.3.198.35.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇳🇱 Site.eu	2026-09-16 04:16:14 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 COMAITE	2026-09-16 02:00:04 (1 day ago)	Suspicious URL access.	Web App Attack
🇩🇪 dom4k	2026-09-16 01:02:17 (1 day ago)	35.198.3.220 - - [16/Sep/2026:01:02:15 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X1 ... show more 35.198.3.220 - - [16/Sep/2026:01:02:15 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web Spam Bad Web Bot Web App Attack
🇫🇷 ✨	2026-09-16 00:13:16 (1 day ago)	Domain : dolphinfoodland.co.uk Rule : hack 2026-09-16 00:11:48 *hidden-privacy* GET /.env.bak - ... show more Domain : dolphinfoodland.co.uk Rule : hack 2026-09-16 00:11:48 *hidden-privacy* GET /.env.bak - 443 - 35.198.3.220 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - www.dolphinfoodland.co.uk 404 0 2 1567 306 190 - - show less	Hacking SQL Injection Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 217.211.91.162

🇧🇷 205.210.31.222

🇿🇦 197.242.67.55

🇺🇸 54.82.58.124

🇩🇪 43.228.157.166

🇺🇸 34.72.62.93

🇧🇷 205.210.31.192

🇺🇸 205.210.31.105

🇺🇸 205.210.31.102

🇮🇩 202.145.0.18

🇧🇷 186.238.242.194

🇧🇷 179.184.85.167

🇮🇳 152.52.197.130

🇨🇳 111.36.152.14

🇨🇳 101.89.141.184

🇱🇹 77.90.185.78

🇩🇪 69.5.169.195

🇱🇹 62.60.130.253

🇻🇳 27.118.20.168

🇺🇸 20.65.144.98