JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.198.49.137

35.198.49.137 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 57%: ?

57%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	137.49.198.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.198.49.137

Whois 35.198.49.137

IP Abuse Reports for 35.198.49.137:

This IP address has been reported a total of 13 times from 10 distinct sources. 35.198.49.137 was first reported on September 15th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-17 22:05:50 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-16. show less	Web App Attack SSH Hacking
🇩🇪 SwinT	2026-09-16 13:00:04 (3 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇫🇷 largo-it.net	2026-09-16 00:29:48 (4 days ago)	[16/Sep/2026:02:29:47.294] HTTP 404 - GET /.env.local [16/Sep/2026:02:29:47.500] HTTP 404 - GET /.en ... show more [16/Sep/2026:02:29:47.294] HTTP 404 - GET /.env.local [16/Sep/2026:02:29:47.500] HTTP 404 - GET /.env.production [16/Sep/2026:02:29:47.707] HTTP 404 - GET /.env.staging [16/Sep/2026:02:29:47.916] HTTP 404 - GET /.env.development [16/Sep/2026:02:29:48.121] HTTP 404 - GET /.env.test [16/Sep/2026:02:29:48.329] HTTP 404 - GET /.env.remote [16/Sep/2026:02:29:48.536] HTTP 404 - GET /.env.bak [16/Sep/2026:02:29:48.743] HTTP 404 - GET /.env.backup show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 22:07:36 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.198.49.137 (137.49.198.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.198.49.137 (137.49.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:07:29.694783 2026] [security2:error] [pid 25069:tid 25069] [client 35.198.49.137:34854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fina.pronio.com"] [uri "/.git/config"] [unique_id "aqnBoXe3nIeFU4aB2tVXnwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-15 22:02:18 (4 days ago)	Auto-ban: >3000 req/min op 2026-09-15	Web App Attack SSH Hacking
🇳🇱 Alt255	2026-09-15 15:31:51 (4 days ago)	[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.198.49.137 - - [15/Sep/2026:17:31:51 +0200] "GET /.git/config HTTP/2.0" 301 395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 12:55:18 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.198.49.137 (137.49.198.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.198.49.137 (137.49.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 08:55:13.215747 2026] [security2:error] [pid 13371:tid 13371] [client 35.198.49.137:50126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teguer.com"] [uri "/.git/config"] [unique_id "aqlAMe0k9nk9vSObmmVjBwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-15 12:27:39 (4 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-15 11:50:26 (5 days ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 Mangelot Hosting	2026-09-15 11:26:48 (5 days ago)	(modsecurity) srv101 ModSecurity 35.198.49.137 (BR/Brazil/137.49.198.35.bc.googleusercontent.com): 3 ... show more (modsecurity) srv101 ModSecurity 35.198.49.137 (BR/Brazil/137.49.198.35.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇸🇪 vaia.cloud	2026-09-15 08:55:02 (5 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-15 08:00:06 (5 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 05:10:07 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 35.198.49.137 (137.49.198.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.198.49.137 (137.49.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 01:10:00.296078 2026] [security2:error] [pid 1466:tid 1466] [client 35.198.49.137:50542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.files.jeremyscraig.com"] [uri "/.git/config"] [unique_id "aqjTKLqmilPyXD8V2brk3gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.109.38.143

🇸🇦 174.140.62.39

🇵🇰 154.192.86.59

🇬🇧 154.16.44.152

🇭🇰 152.32.135.48

🇮🇳 106.219.71.18

🇺🇸 104.207.33.242

🇬🇧 86.2.38.131

🇩🇪 68.183.73.169

🇺🇸 67.220.180.114

🇺🇸 45.3.50.202

🇵🇰 39.34.188.137

🇵🇰 2001:df4:d1c0:ba36:44c3:bc0f:707a:8c3b

🇺🇸 164.92.117.228

🇳🇮 161.0.63.11

🇦🇷 138.204.159.181

🇺🇸 137.184.220.72

🇻🇳 113.22.47.254

🇨🇳 101.126.11.137

🇺🇸 43.172.8.79