JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.198.7.102

35.198.7.102 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	102.7.198.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.198.7.102

Whois 35.198.7.102

IP Abuse Reports for 35.198.7.102:

This IP address has been reported a total of 40 times from 31 distinct sources. 35.198.7.102 was first reported on September 10th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-11 12:58:09 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 08:58:05.712340 2026] [security2:error] [pid 6653:tid 6661] [client 35.198.7.102:51752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.heworeblack.104ventures.com"] [uri "/.git/config"] [unique_id "aqP63ZheESlYQguXcmSLUwAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-11 12:24:35 (2 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config \| 2026-09-11 12:24 UTC show less	Hacking Web App Attack
🇩🇪 BlueWire Hosting	2026-09-11 11:50:58 (2 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇳🇱 JaRoNL	2026-09-11 11:35:00 (3 hours ago)	35.198.7.102 - - [11/Sep/2026:13:35:00 +0200] "GET /.git/config HTTP/1.1" 301 554 "-" "Mozilla/5.0 ( ... show more 35.198.7.102 - - [11/Sep/2026:13:35:00 +0200] "GET /.git/config HTTP/1.1" 301 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-11 10:29:50 (4 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 35.198.7.102 (BR/Brazil/102.7.198.35.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 35.198.7.102 (BR/Brazil/102.7.198.35.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 todix	2026-09-11 09:39:53 (5 hours ago)	WebAttack or semilar from 35.198.7.102	Web App Attack
🇩🇪 FD-IX	2026-09-11 09:34:42 (5 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 08:54:10 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 04:54:03.046397 2026] [security2:error] [pid 11501:tid 11501] [client 35.198.7.102:47538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.herston.us.herston.net"] [uri "/.git/config"] [unique_id "aqPBq_dQc7EpTZ1Iydp6FAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-11 08:25:02 (6 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 08:13:08 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 04:13:01.570924 2026] [security2:error] [pid 29920:tid 29920] [client 35.198.7.102:41860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.herrell.net.utilis.net"] [uri "/.git/config"] [unique_id "aqO4Dd-Sg-kak_szhYDj9wAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 06:41:25 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 02:41:17.296556 2026] [security2:error] [pid 17475:tid 17475] [client 35.198.7.102:49914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.herndonms5k.nilestree.com"] [uri "/.git/config"] [unique_id "aqOijf1MIhRBA-G4uvLQZgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-11 06:35:12 (8 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇩🇪 EGP Abuse Dept	2026-09-11 05:12:30 (9 hours ago)	Scanning for web/db/file exploits on www.herkon.nl	SQL Injection Bad Web Bot Web App Attack
🇨🇭 🇨🇭 Hosting	2026-09-11 05:10:41 (9 hours ago)	Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 04:21:11 (10 hours ago)	(mod_security) mod_security (id:210730) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 35.198.7.102 (102.7.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 00:21:06.252869 2026] [security2:error] [pid 9546:tid 9546] [client 35.198.7.102:51846] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.heritagecityblinds.com.au.g-h2o.com\|F\|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.heritagecityblinds.com.au.g-h2o.com"] [uri "/.env.bak"] [unique_id "aqOBsp-caz4MOOAFvaha9AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.228.141.113

🇺🇸 162.216.150.24

🇺🇸 162.216.149.250

🇺🇸 150.107.36.82

🇬🇧 149.34.172.41

🇮🇩 114.9.97.2

🇩🇪 94.16.106.15

🇧🇦 80.65.90.155

🇺🇸 66.29.156.149

🇺🇸 23.27.211.182

🇨🇴 190.121.143.165

🇷🇺 188.19.44.178

🇸🇬 167.71.218.26

🇳🇵 163.53.25.184

🇳🇱 134.19.178.162

🇦🇷 131.255.240.10

🇻🇳 113.186.192.89

🇷🇺 89.208.212.111

🇦🇺 45.130.141.190

🇿🇲 41.63.32.22