JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.220.197.78

35.220.197.78 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 97%: ?

97%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	78.197.220.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.220.197.78

Whois 35.220.197.78

IP Abuse Reports for 35.220.197.78:

This IP address has been reported a total of 24 times from 17 distinct sources. 35.220.197.78 was first reported on August 30th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 2000cn.com.au	2026-08-31 09:56:31 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 4server	2026-08-31 09:33:38 (7 hours ago)	[MonAug3111:33:33.1287402026][security2:error][pid2501156:tid2501279][client35.220.197.78:0]ModSecur ... show more [MonAug3111:33:33.1287402026][security2:error][pid2501156:tid2501279][client35.220.197.78:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.massimilianoparquet.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"apVKbaes-bDgXBoZ3dvJ4QAAAQ4\"] show less	Port Scan Brute-Force Web App Attack
🇪🇸 pipeline.es	2026-08-31 07:28:32 (9 hours ago)	Web scanning / probing for vulnerable paths \| URL: /laravel5/.env \| Evidence: maseuropa.es 35.220.19 ... show more Web scanning / probing for vulnerable paths \| URL: /laravel5/.env \| Evidence: maseuropa.es 35.220.197.78 - - [31/Aug/2026:09:28:08 +0200] \"GET /laravel5/.env HTTP/1.1\" 404 22059 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=HK \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: HK show less	Port Scan Web App Attack
Anonymous	2026-08-31 07:10:02 (9 hours ago)	\| [Dangerous/Hong Kong] Aggressive IP 35.220.197.78 (~30 hits). Type: DoS Defender- Web server 400 e ... show more \| [Dangerous/Hong Kong] Aggressive IP 35.220.197.78 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇧🇪 taivas.nl	2026-08-31 04:34:11 (12 hours ago)	Many_bad_calls	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-30 22:00:45 (19 hours ago)	Auto-ban: >3000 req/min op 2026-08-30	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-30 19:05:38 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.220.197.78 (78.197.220.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.220.197.78 (78.197.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 15:05:32.884204 2026] [security2:error] [pid 14970:tid 14970] [client 35.220.197.78:58442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.db.ctemdr.com"] [uri "/.git/config"] [unique_id "apR-_Fbh9QkSp9XKwqCOOgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-08-30 18:02:13 (23 hours ago)	Bad_requests	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-30 17:18:06 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.220.197.78 (78.197.220.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.220.197.78 (78.197.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 13:17:56.404139 2026] [security2:error] [pid 27906:tid 27906] [client 35.220.197.78:50900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.daves.construction.savingshvac.com"] [uri "/.git/config"] [unique_id "apRlxOq9BUN9mDqDWUX7CAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 14:07:44 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.220.197.78 (78.197.220.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.220.197.78 (78.197.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 10:07:37.637602 2026] [security2:error] [pid 13141:tid 13141] [client 35.220.197.78:41600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.darkcodeproductions.com.darkcodedesign.net"] [uri "/.git/config"] [unique_id "apQ5KRCFeqFYQpU9X4YbHQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-30 13:04:57 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇦🇺 screwlooseit.com.au	2026-08-30 11:56:49 (1 day ago)	Blocked by CSF 13 firewall - Rule: config-dotfile 78.197.220.35.bc.googleusercontent.com	Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 11:29:11 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.220.197.78 (78.197.220.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.220.197.78 (78.197.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 07:29:06.406622 2026] [security2:error] [pid 18384:tid 18384] [client 35.220.197.78:50390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.danafrostick.com"] [uri "/.git/config"] [unique_id "apQUAtj0EitM4kgmeSumfAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-30 10:57:18 (1 day ago)	Scanner hitting /.git/config on www.daloncorp.eu (GOOGLE-CLOUD) — aaguard	Brute-Force Port Scan
🇳🇱 Site.eu	2026-08-30 10:28:36 (1 day ago)	Excessive 404/403 errors	Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 202.47.52.136

🇩🇪 213.209.159.154

🇫🇮 147.185.133.131

🇨🇳 121.46.239.202

🇻🇳 103.232.55.148

🇺🇸 66.249.77.163

🇬🇧 51.195.183.232

🇺🇸 193.151.188.123

🇨🇳 123.96.118.124

🇫🇷 77.239.124.172

🇱🇹 62.60.130.247

🇬🇧 31.14.254.114

🇺🇸 2600:1f18:540c:ce00:6b9f:d5cc:ae92:b5d9

🇰🇷 220.85.210.200

🇺🇸 216.25.89.138

🇺🇸 195.184.76.197

🇮🇳 182.18.161.165

🇺🇸 108.24.188.100

🇦🇺 104.22.127.93

🇷🇺 95.86.246.42