JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.221.212.112

35.221.212.112

Recent Activity

54 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Google LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS396982

Hostname(s)

112.212.221.35.bc.googleusercontent.com

Domain Name

google.com

Country

🇹🇼 Taiwan

City

Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 35.221.212.112:

This IP address has been reported a total of 54 times from 36 distinct sources. 35.221.212.112 was first reported on August 28th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 15 reports; Germany with 11 reports; Netherlands with 7 reports. The most common categories in these recent reports were: Web App Attack 44 times; Bad Web Bot 21 times; Brute-Force 20 times; Hacking 9 times; Exploited Host 4 times; Other 9 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-29 22:01:32 (1 hour ago)	Auto-ban: >3000 req/min op 2026-08-29	Web App Attack SSH Hacking
🇩🇪 psauxit	2026-08-29 20:21:49 (2 hours ago)	Fail2Ban - NGINX heavily bad-bot, possible vulnerability scanning and excessive crawling/scraping	Bad Web Bot Web App Attack Hacking Web Spam
Anonymous	2026-08-29 18:50:54 (4 hours ago)	XSS Attempt	Hacking
🇫🇮 paissangroup	2026-08-29 13:27:56 (9 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 10:54:22 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 06:54:14.679352 2026] [security2:error] [pid 6958:tid 6958] [client 35.221.212.112:58660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.abneyfoundation.org"] [uri "/@fs/.env"] [unique_id "apK6VrLG-e-Zjv2HnK1KvAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 10:14:22 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 06:14:14.915512 2026] [security2:error] [pid 571:tid 571] [client 35.221.212.112:19090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.openheartwellness.com"] [uri "/@fs/root/.env"] [unique_id "apKw9trYfxoOfSeAkESncQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 noconex	2026-08-29 09:21:08 (13 hours ago)	Wazuh Alert \| Rule ID: 110100 \| Desc: Suricata: Exploit (ET WEB_SPECIFIC_APPS Vite Arbitrary File Re ... show more Wazuh Alert \| Rule ID: 110100 \| Desc: Suricata: Exploit (ET WEB_SPECIFIC_APPS Vite Arbitrary File Read Via raw parameter (CVE-2025-30208)) 35.221.212.112 show less	Port Scan Brute-Force SSH
Anonymous	2026-08-29 09:05:47 (14 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 factor1	2026-08-29 08:42:33 (14 hours ago)	CrowdSec at churndash Reports Abuse	Web App Attack
Anonymous	2026-08-29 08:05:02 (15 hours ago)	35.221.212.112 - - [29/Aug/2026:10:04:02 +0200] "GET HTTP/1.1" 403 1852 "-" "Mozilla/5.0 (Windows N ... show more 35.221.212.112 - - [29/Aug/2026:10:04:02 +0200] "GET HTTP/1.1" 403 1852 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:143.17) Gecko/20100101 Firefox/143.17; compatible; ChatGPT-User/1.0; +https://openai.com/bot" show less	Web Spam Blog Spam Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 07:46:30 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 03:46:26.570501 2026] [security2:error] [pid 32171:tid 32252] [client 35.221.212.112:47878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.oftv.xyz"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "apKOUoxx2nDuXBTwmDBt2wAAANM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 07:30:10 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 03:30:03.540951 2026] [security2:error] [pid 28247:tid 28247] [client 35.221.212.112:1460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pointillistic.com"] [uri "/@fs/.env"] [unique_id "apKKe2S3PxIqNDw5l_DIKwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-29 07:19:40 (15 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇮🇹 mediarama.com	2026-08-29 07:08:20 (15 hours ago)	Banned by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 06:49:15 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.221.212.112 (112.212.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 02:49:10.246625 2026] [security2:error] [pid 17316:tid 17316] [client 35.221.212.112:50024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sacoriverjazz.org"] [uri "/@fs/app/.env"] [unique_id "apKA5ijWzXdVGSHnq5zmWAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.195.135.222

🇮🇳 183.82.56.12

🇬🇧 172.70.85.193

🇩🇪 146.70.36.132

🇨🇳 116.163.41.78

🇸🇬 114.119.142.126

🇳🇱 45.148.10.152

🇨🇳 222.211.66.73

🇱🇹 213.176.26.72

🇬🇧 172.69.224.48

🇧🇩 172.68.231.192

🇩🇪 94.26.106.175

🇺🇸 66.132.195.91

🇷🇴 2.57.122.53

🇨🇳 218.207.1.35

🇺🇸 172.71.31.187

🇺🇸 172.68.160.136

🇬🇧 172.64.192.128

🇮🇳 122.168.194.41

🇹🇷 94.154.43.125