JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.199.97.104

35.199.97.104 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	104.97.199.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.199.97.104

Whois 35.199.97.104

IP Abuse Reports for 35.199.97.104:

This IP address has been reported a total of 26 times from 21 distinct sources. 35.199.97.104 was first reported on June 14th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 Antinson	2026-06-15 10:35:34 (3 hours ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-15 09:55:44 (4 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 NewWavesApp	2026-06-15 09:44:09 (4 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 35.199.97.104 (BR/Brazil/104.97.199.35. ... show more (mod_security) mod_security triggered on hostname [redacted] 35.199.97.104 (BR/Brazil/104.97.199.35.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
Anonymous	2026-06-15 09:25:53 (4 hours ago)	35.199.97.104 - - [15/Jun/2026:09:25:52 +0000] "GET /wp-content/.git/config HTTP/1.1" 302 4703 "-" " ... show more 35.199.97.104 - - [15/Jun/2026:09:25:52 +0000] "GET /wp-content/.git/config HTTP/1.1" 302 4703 "-" "Opera/9.60 (J2ME/MIDP; Opera Mini/4.1.11320/608; U; en) Presto/2.2.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 09:00:26 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.199.97.104 (104.97.199.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.199.97.104 (104.97.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:00:18.460706 2026] [security2:error] [pid 30700:tid 30700] [client 35.199.97.104:60692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimhermelband.com"] [uri "/app/.git/config"] [unique_id "ai-_In_CPUM8dhmS_M0oHgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-06-15 08:41:17 (5 hours ago)	1.306 requests with url.path */.git/config	Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-06-15 07:23:37 (6 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 06:39:07 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.199.97.104 (104.97.199.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.199.97.104 (104.97.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:39:02.714648 2026] [security2:error] [pid 23337:tid 23337] [client 35.199.97.104:57866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lertap5.com"] [uri "/blog/.git/config"] [unique_id "ai-eBnMZhxfIraMcH__KTQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 igerman	2026-06-15 06:35:20 (7 hours ago)	caddy probes: api: GET /api/.git/config(404) \| git-repo: GET /.git/config(DROP) \| web: GET /app/.git ... show more caddy probes: api: GET /api/.git/config(404) \| git-repo: GET /.git/config(DROP) \| web: GET /app/.git/config(404), GET /assets/.git/config(404), GET /backend/.git/config(404), GET /blog/.git/config(404), GET /code/.git/config(404), GET /dashboard/.git/config(404), GET /frontend/.git/config(404), GET /htdocs/.git/config(404), GET /laravel/.git/config(404), GET /portal/.git/config(404), GET /project/.git/config(404), GET /public/.git/config(404), GET /shop/.git/config(404), GET /site/.git/config(404), GET /src/.git/config(404), GET /symfony/.git/config(404), GET /v1/.git/config(404), GET /v2/.git/config(404), GET /v3/.git/config(404), GET /web/.git/config(404), GET /www/.git/config(404) \| wordpress: GET /wordpress/.git/config(404), GET /wp-content/.git/config(DROP) show less	Web App Attack
🇳🇱 wlt-blocker	2026-06-15 05:52:41 (8 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇨🇦 Bots.go.to.hell	2026-06-15 05:28:41 (8 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-06-15 04:18:01 (9 hours ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 03:11:45 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.199.97.104 (104.97.199.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.199.97.104 (104.97.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:11:40.210224 2026] [security2:error] [pid 12814:tid 12814] [client 35.199.97.104:42204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrisi-sharper.com"] [uri "/.git/config"] [unique_id "ai9tbHDSL_MxYwfm7UfqVAAAAGk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-15 02:56:38 (11 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 02:35:49 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.199.97.104 (104.97.199.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.199.97.104 (104.97.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:35:42.276174 2026] [security2:error] [pid 19078:tid 19078] [client 35.199.97.104:53330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "riversidecabinswv.com"] [uri "/frontend/.git/config"] [unique_id "ai9k_mseaYx6_WySzBXNHQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c0e::128

🇰🇷 211.217.146.99

🇲🇴 182.93.50.90

🇮🇳 168.144.113.21

🇰🇷 112.184.195.166

🇫🇷 91.231.89.87

🇱🇹 77.90.185.97

🇰🇷 39.115.195.164

🇺🇸 34.162.232.48

🇨🇳 8.136.126.42

🇷🇴 2.57.122.238

🇨🇳 220.154.133.166

🇲🇽 187.140.91.20

🇮🇳 136.185.8.72

🇨🇳 120.33.236.2

🇩🇪 93.248.4.134

🇫🇷 91.231.89.66

🇪🇬 41.128.181.199

🇨🇦 20.116.34.103

🇨🇳 14.103.118.226