JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.215.185.80

35.215.185.80 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 74%: ?

74%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS15169
Hostname(s)	80.185.215.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.215.185.80

Whois 35.215.185.80

IP Abuse Reports for 35.215.185.80:

This IP address has been reported a total of 15 times from 15 distinct sources. 35.215.185.80 was first reported on October 7th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-10-13 17:45:54 (3 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.astropot.tech \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-10-11 22:01:56 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-10. show less	Web App Attack SSH Hacking
🇸🇪 KIDOS	2026-10-10 17:58:08 (6 days ago)	IIS malicious activity: suspicious_path	Web App Attack
Anonymous	2026-10-08 01:57:34 (1 week ago)	[ssd5.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.git/config \| /.env \| /.e ... show more [ssd5.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
Anonymous	2026-10-08 01:33:24 (1 week ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 01:30:42 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.215.185.80 (80.185.215.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.215.185.80 (80.185.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 21:30:37.295228 2026] [security2:error] [pid 16045:tid 16045] [client 35.215.185.80:51712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sscsco.com"] [uri "/.git/config"] [unique_id "asbyPcGss5NyeVWxtkzGzQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-10-07 12:51:30 (1 week ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇩🇪 keep_out	2026-10-07 12:47:34 (1 week ago)	Probing\(5\) HTTP Ports ...	Bad Web Bot Web App Attack
🇨🇦 zXero	2026-10-07 12:44:32 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇳🇱 Mangelot Hosting	2026-10-07 09:48:38 (1 week ago)	(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 35.215.185.80 (HK/Hong Kong/80.1 ... show more (web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 35.215.185.80 (HK/Hong Kong/80.185.215.35.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇷🇴 clauss	2026-10-07 09:42:16 (1 week ago)	35.215.185.80 - - [07/Oct/2026:12:42:15 +0300] "GET /.git/config HTTP/1.1" 403 4800 "-" "Mozilla/5.0 ... show more 35.215.185.80 - - [07/Oct/2026:12:42:15 +0300] "GET /.git/config HTTP/1.1" 403 4800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.215.185.80 - - [07/Oct/2026:12:42:15 +0300] "GET /.env.local HTTP/1.1" 403 4801 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 Lino Project	2026-10-07 09:41:06 (1 week ago)	35.215.185.80 - - [07/Oct/2026:11:41:05 +0200] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 ... show more 35.215.185.80 - - [07/Oct/2026:11:41:05 +0200] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Stara	2026-10-07 09:38:52 (1 week ago)	ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)	Brute-Force Hacking Web App Attack
Anonymous	2026-10-07 09:30:25 (1 week ago)	[Wed Oct 07 11:30:23.168820 2026] [proxy_fcgi:error] [pid 36072:tid 36107] [client 35.215.185.80:603 ... show more [Wed Oct 07 11:30:23.168820 2026] [proxy_fcgi:error] [pid 36072:tid 36107] [client 35.215.185.80:60348] AH01071: Got error 'Primary script unknown' [Wed Oct 07 11:30:23.418046 2026] [proxy_fcgi:error] [pid 36072:tid 36100] [client 35.215.185.80:60348] AH01071: Got error 'Primary script unknown' [Wed Oct 07 11:30:23.677444 2026] [proxy_fcgi:error] [pid 36072:tid 36115] [client 35.215.185.80:60348] AH01071: Got error 'Primary script unknown' [Wed Oct 07 11:30:23.925076 2026] [proxy_fcgi:error] [pid 36072:tid 36123] [client 35.215.185.80:60348] AH01071: Got error 'Primary script unknown' [Wed Oct 07 11:30:24.180827 2026] [proxy_fcgi:error] [pid 36072:tid 36122] [client 35.215.185.80:60348] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-10-07 09:28:33 (1 week ago)	Try to access /.git/config	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.63

🇳🇱 109.160.32.162

🇬🇧 86.38.187.83

🇳🇱 81.19.216.73

🇺🇸 66.132.186.132

🇺🇸 45.79.214.253

🇷🇺 212.124.5.62

🇲🇽 187.202.110.235

🇬🇧 185.247.137.199

🇨🇦 185.98.171.93

🇫🇮 147.185.133.104

🇯🇵 134.122.137.152

🇫🇷 85.217.140.20

🇫🇷 85.217.140.8

🇫🇷 51.254.59.113

🇨🇳 42.4.63.139

🇸🇳 41.82.21.26

🇩🇪 36.255.97.232

🇸🇬 212.73.148.35

🇹🇼 198.235.24.99