JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.221.226.54

35.221.226.54 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	54.226.221.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.221.226.54

Whois 35.221.226.54

IP Abuse Reports for 35.221.226.54:

This IP address has been reported a total of 57 times from 38 distinct sources. 35.221.226.54 was first reported on September 22nd 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-23 06:00:01 (12 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 conrad10781	2026-09-23 02:48:21 (15 hours ago)	nginx-dot-env	Web App Attack
🇮🇹 VHosting	2026-09-23 01:20:08 (16 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 ConsulHosting	2026-09-23 00:43:54 (17 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-09-23 00:28:00 (17 hours ago)	(mod_security) mod_security (id:210730) triggered by 35.221.226.54 (54.226.221.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 35.221.226.54 (54.226.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 20:27:55.363112 2026] [security2:error] [pid 12914:tid 12914] [client 35.221.226.54:38454] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.joebankx.com\|F\|2"] [data ".joebankx.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.joebankx.com"] [uri "/z9x8c7v6b5-debug-trigger-www.joebankx.com"] [unique_id "arMdC-QMAvjHtfhDkGacpwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-22 23:59:52 (18 hours ago)	Web application attack detected.	Web App Attack
🇪🇸 robotstxt	2026-09-22 23:22:08 (18 hours ago)	35.221.226.54 - - [22/Sep/2026:23:21:09 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 25497 "https: ... show more 35.221.226.54 - - [22/Sep/2026:23:21:09 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 25497 "https://www.domeofthefive.com/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="35.221.226.54" 35.221.226.54 - - [22/Sep/2026:23:21:11 +0000] "GET /.env.old HTTP/2.0" 403 26829 "https://www.domeofthefive.com/.env.old" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" edge="35.221.226.54" 35.221.226.54 - - [22/Sep/2026:23:21:11 +0000] "GET /.env.save HTTP/2.0" 403 26829 "https://www.domeofthefive.com/.env.save" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" edge="35.221.226.54" 35.221.226.54 - - [22/Sep/2026:23:21:11 +0000] "GET /.env.prod HTTP/2.0" 403 26829 "https://www.domeofthefive.com/.env.prod" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://develop ... show less	Web App Attack
Anonymous	2026-09-22 22:40:37 (19 hours ago)	git/env leak probe	Web App Attack
🇺🇸 robotstxt	2026-09-22 22:37:48 (19 hours ago)	35.221.226.54 - - [22/Sep/2026:22:36:54 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 36244 "https: ... show more 35.221.226.54 - - [22/Sep/2026:22:36:54 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 36244 "https://www.blimburnseeds.com/.vite/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "35.221.226.54" edge="162.159.106.183" 35.221.226.54 - - [22/Sep/2026:22:36:58 +0000] "GET /.dockerenv HTTP/2.0" 403 2 "https://www.blimburnseeds.com/.dockerenv" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "35.221.226.54" edge="172.71.215.113" 35.221.226.54 - - [22/Sep/2026:22:36:59 +0000] "GET /.env.production?raw HTTP/2.0" 403 36224 "https://www.blimburnseeds.com/.env.production?raw" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "35.221.226.54" edge="172.71.215.113" 35.221.226.54 - - [22/Sep/2026:22:36:59 +0000] "GET /.env.local?import&raw HTTP/2.0" 403 36243 "https://www.blimburnseeds.com/.env.local?import&raw" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" "35.221.226.54" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 21:40:49 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.221.226.54 (54.226.221.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.221.226.54 (54.226.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:40:42.080054 2026] [security2:error] [pid 8730:tid 8730] [client 35.221.226.54:53696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-harbi.com"] [uri "/.env.prod"] [unique_id "arL12qNV6Gza3uX0l7BgWwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 noise.agency	2026-09-22 21:22:48 (20 hours ago)	35.221.226.54 (TW/Taiwan/54.226.221.35.bc.googleusercontent.com), more than 30 Apache 404 hits	Hacking
🇺🇸 robotstxt	2026-09-22 20:44:31 (21 hours ago)	35.221.226.54 - - [22/Sep/2026:20:44:03 +0000] "GET /.env.example HTTP/2.0" 403 2 "-" "Mozilla/5.0 ( ... show more 35.221.226.54 - - [22/Sep/2026:20:44:03 +0000] "GET /.env.example HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "35.221.226.54" edge="162.159.98.41" 35.221.226.54 - - [22/Sep/2026:20:44:04 +0000] "GET /.env.production HTTP/2.0" 403 2 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" "35.221.226.54" edge="162.159.98.41" 35.221.226.54 - - [22/Sep/2026:20:44:04 +0000] "GET /.env.local HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" "35.221.226.54" edge="162.159.98.41" 35.221.226.54 - - [22/Sep/2026:20:44:04 +0000] "GET /.env.backup HTTP/2.0" 403 2 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" "35.221.226.54" edge="162.159.98.41" 35.221.226.54 - - [22/Sep/2026:20:44:04 +0000] "GET /.env.prod HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; Amazon ... show less	Web App Attack
🇺🇸 interbiznw.com	2026-09-22 20:39:34 (21 hours ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇲🇾 Rizzy	2026-09-22 20:33:03 (21 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 ChamberofCommerce.com	2026-09-22 20:19:26 (21 hours ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:228 show less	Bad Web Bot

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 125.215.52.45

🇺🇸 66.132.172.207

🇨🇳 39.144.229.54

🇷🇴 2.57.122.74

🇳🇱 213.177.179.109

🇷🇺 188.32.80.88

🇺🇸 172.202.114.100

🇺🇸 172.94.22.12

🇺🇸 159.89.94.81

🇮🇳 118.95.33.69

🇯🇵 34.104.221.176

🇬🇧 2a03:2880:f80a:12::

🇧🇷 190.89.136.229

🇺🇸 173.199.119.161

🇯🇵 160.251.229.79

🇨🇳 157.18.90.233

🇳🇱 138.226.239.34

🇭🇰 119.28.46.114

🇩🇪 64.226.110.44

🇰🇷 43.133.91.48