JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.238.105.55

35.238.105.55 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 95%: ?

95%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	55.105.238.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.238.105.55

Whois 35.238.105.55

IP Abuse Reports for 35.238.105.55:

This IP address has been reported a total of 24 times from 17 distinct sources. 35.238.105.55 was first reported on September 1st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-02 22:01:00 (1 hour ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-09-02 19:29:04 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 15:29:00.296196 2026] [security2:error] [pid 5500:tid 5500] [client 35.238.105.55:60632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hal.dance"] [uri "/public/.git/config"] [unique_id "aph4_DddeRd0GVdmprRNyAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-09-02 19:28:39 (4 hours ago)	35.238.105.55 - - [03/Sep/2026:05:28:38 +1000] "GET /wordpress/.git/config HTTP/1.1" 403 978 "-" "cr ... show more 35.238.105.55 - - [03/Sep/2026:05:28:38 +1000] "GET /wordpress/.git/config HTTP/1.1" 403 978 "-" "crusader-worker/1.0" 35.238.105.55 - - [03/Sep/2026:05:28:38 +1000] "GET /var/www/.git/config HTTP/1.1" 404 988 "-" "crusader-worker/1.0" 35.238.105.55 - - [03/Sep/2026:05:28:38 +1000] "GET /api/.git/config HTTP/1.1" 404 988 "-" "crusader-worker/1.0" 35.238.105.55 - - [03/Sep/2026:05:28:38 +1000] "GET /site/.git/config HTTP/1.1" 404 988 "-" "crusader-worker/1.0" 35.238.105.55 - - [03/Sep/2026:05:28:38 +1000] "GET /src/.git/config HTTP/1.1" 404 988 "-" "crusader-worker/1.0" 35.238.105.55 - - [03/Sep/2026:05:28:38 +1000] "GET /app/.git/config HTTP/1.1" 404 988 "-" "crusader-worker/1.0" ... show less	Bad Web Bot
🇬🇧 Aetherweb Ark	2026-09-02 18:44:03 (4 hours ago)	(mod_security) mod_security (id:949110) triggered by 35.238.105.55 (US/United States/55.105.238.35.b ... show more (mod_security) mod_security (id:949110) triggered by 35.238.105.55 (US/United States/55.105.238.35.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 15:36:36 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 11:36:30.782016 2026] [security2:error] [pid 3849:tid 3849] [client 35.238.105.55:58640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.actability.com"] [uri "/var/www/.git/config"] [unique_id "aphCfqGmje3ryzn1Gv1-XgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-09-02 14:19:24 (9 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, scanner_ua. Observed by 1 sensor(s); 12 hits. show less	Web App Attack
🇺🇸 mnsf	2026-09-02 08:05:36 (15 hours ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇫🇷 dynamix	2026-09-02 06:09:32 (17 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 e.fierstra	2026-09-02 06:00:15 (17 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 05:55:13 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:55:09.135818 2026] [security2:error] [pid 20239:tid 20239] [client 35.238.105.55:55500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.partyfavorboxes.com"] [uri "/backend/.git/config"] [unique_id "ape6PfwnmSeN-1VoF7m6vQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 05:08:08 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:08:04.530170 2026] [security2:error] [pid 3263:tid 3335] [client 35.238.105.55:48138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail8.absurdotron.com"] [uri "/site/.git/config"] [unique_id "apevNKfXtom_pWRKR8Z3JwAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-02 05:06:16 (18 hours ago)	Trying to access config files	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 04:39:28 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:39:20.988071 2026] [security2:error] [pid 11298:tid 11298] [client 35.238.105.55:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.grainavi.com"] [uri "/www/.git/config"] [unique_id "apeoeKtJHuYBfAuRrLjOjwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 factor1	2026-09-02 02:43:27 (20 hours ago)	CrowdSec at saturn Reports Abuse	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 01:40:28 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.105.55 (55.105.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 21:40:23.926741 2026] [security2:error] [pid 25534:tid 25534] [client 35.238.105.55:45746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "h-mod.com"] [uri "/.git/config"] [unique_id "apd-h2lzNc8Dhl9NmDYLQAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.142.193.149

🇸🇬 8.222.203.158

🇫🇷 2a01:cb14:80:8d00:f02f:aef8:775:e507

🇩🇪 217.154.160.154

🇧🇩 182.48.68.82

🇮🇹 93.56.154.134

🇸🇪 87.251.213.83

🇲🇾 47.250.174.174

🇫🇷 45.157.112.145

🇨🇱 34.176.199.138

🇰🇷 14.49.206.155

🇮🇳 122.160.142.194

🇨🇳 118.145.238.115

🇬🇧 89.37.172.143

🇨🇳 36.137.48.118

🇮🇷 5.239.240.2

🇺🇸 152.32.182.8

🇩🇪 89.245.31.192

🇨🇦 34.95.57.220

🇵🇱 194.180.48.39