JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.220.137.122

35.220.137.122 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	122.137.220.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.220.137.122

Whois 35.220.137.122

IP Abuse Reports for 35.220.137.122:

This IP address has been reported a total of 27 times from 21 distinct sources. 35.220.137.122 was first reported on September 15th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-09-17 02:42:36 (2 hours ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-09-16 16:54:26 (12 hours ago)	35.220.137.122 - - [16/Sep/2026:18:54:21 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Lin ... show more 35.220.137.122 - - [16/Sep/2026:18:54:21 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.137.122 - - [16/Sep/2026:18:54:21 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.137.122 - - [16/Sep/2026:18:54:21 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.137.122 - - [16/Sep/2026:18:54:21 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.137.122 - - [16/Sep/2026:18:54:22 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.220.137.122 - - [16/Sep/2026:18:54:22 +0200] "GET /.env.local HTTP/1.1" 40 ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 16:38:05 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.220.137.122 (122.137.220.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.220.137.122 (122.137.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:38:00.008176 2026] [security2:error] [pid 11363:tid 11363] [client 35.220.137.122:50150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.iconbizpromo.com"] [uri "/.git/config"] [unique_id "aqrF6HA5vxpMYSoBzgAxNwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 15:07:26 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.220.137.122 (122.137.220.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.220.137.122 (122.137.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:07:21.746337 2026] [security2:error] [pid 10645:tid 10668] [client 35.220.137.122:33958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.icecc.com.aafm.us"] [uri "/.git/config"] [unique_id "aqqwqWg8NI6wiY3X7z8CNAAAAIM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 14:20:29 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.220.137.122 (122.137.220.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.220.137.122 (122.137.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:20:23.661986 2026] [security2:error] [pid 2769042:tid 2769042] [client 35.220.137.122:34254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ic1.ic1.biz"] [uri "/.git/config"] [unique_id "aqqlp1UQSyJ9kjoxXtz2CwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-16 14:20:29 (14 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇪🇸 pipeline.es	2026-09-16 14:07:44 (14 hours ago)	Web scanning / probing for vulnerable paths \| URL: /v3/.env \| Evidence: ibturismo.com.br 35.220.137. ... show more Web scanning / probing for vulnerable paths \| URL: /v3/.env \| Evidence: ibturismo.com.br 35.220.137.122 - - [16/Sep/2026:16:06:52 +0200] \"GET /v3/.env HTTP/1.1\" 404 18955 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=HK \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: HK show less	Port Scan Web App Attack
🇩🇪 LRob	2026-09-16 14:04:15 (15 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.env (+5 more) \| 2026-09-16 14:04 UTC show less	Hacking Web App Attack
Anonymous	2026-09-16 13:08:12 (15 hours ago)	Bot / seems abusive / Apache connections: 24	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2026-09-16 09:11:46 (19 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-09-16 06:43:04 (22 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup, server_status, wp_admin. Observed by 1 sensor(s); 552 hits. show less	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-16 06:42:24 (22 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-09-16 04:07:03 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.220.137.122 (122.137.220.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.220.137.122 (122.137.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:06:58.448252 2026] [security2:error] [pid 4099:tid 4099] [client 35.220.137.122:46214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.inmaine.aromatherapyricebags.com"] [uri "/.git/config"] [unique_id "aqoV4uEniJsALCcAeECwlQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-16 03:30:03 (1 day ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-16 01:27:42 (1 day ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.81

🇫🇷 207.180.192.205

🇰🇷 203.253.26.83

🇧🇷 200.189.72.6

🇦🇷 190.181.126.143

🇧🇷 172.69.11.200

🇻🇳 171.225.192.251

🇿🇦 165.16.170.201

🇳🇱 158.173.21.36

🇨🇦 138.199.57.38

🇺🇸 137.184.232.235

🇧🇪 130.211.55.223

🇰🇿 92.47.46.174

🇷🇺 91.244.113.178

🇧🇬 79.124.62.126

🇧🇬 78.128.113.74

🇻🇪 45.236.28.218

🇺🇸 35.196.133.73

🇳🇱 34.178.167.214

🇩🇪 23.158.56.120