JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

35.241.113.220

Activity Trending Down

Abuse Confidence Score

29% Elevated

20 reports

18 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 220.113.241.35.bc.googleusercontent.com
Domain Name: google.com
Country: 🇭🇰 Hong Kong
City: Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 18 distinct reporters

First reported

September 15th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 6 🇩🇪 Germany 4 🇨🇿 Czechia 3

Most common categories Web App Attack 18 Brute-Force 8 Hacking 6 Bad Web Bot 3 Port Scan 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-16 09:31:03 UTC · (1 month ago)	Bot / scanning and/or hacking attempts: POST / HTTP/1.1, GET /.env.development HTTP/1.1, GET / HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.git/config HT ... show more Bot / scanning and/or hacking attempts: POST / HTTP/1.1, GET /.env.development HTTP/1.1, GET / HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.production HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 06:39:01 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 35.241.113.220 (220.113.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:38:56.197498 2026] [security2:error] [pid 14929:ti ... show more (mod_security) mod_security (id:210492) triggered by 35.241.113.220 (220.113.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:38:56.197498 2026] [security2:error] [pid 14929:tid 14929] [client 35.241.113.220:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.shubil.com"] [uri "/.git/config"] [unique_id "aqo5gKatGgME2MVFSU6DJAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 OceanTreasure	2026-09-16 06:36:27 UTC · (1 month ago)	tcp/443; Git configuration exposure attempt: "GET /.git/config" @ 2026-09-16T06:36:27Z [proxy]	Web App Attack
🇩🇪 Grossmann-Gruppe	2026-09-16 05:44:17 UTC · (1 month ago)	Plesk Fail2Ban: plesk-modsecurity	Hacking Brute-Force
🇳🇱 Alt255	2026-09-16 05:16:20 UTC · (1 month ago)	[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.241.113.220 - - [16/Sep/2026:07:16:18 +0200] "GET /.git/config HTTP/1.1" 403 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ... show more [ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.241.113.220 - - [16/Sep/2026:07:16:18 +0200] "GET /.git/config HTTP/1.1" 403 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-16 04:52:26 UTC · (1 month ago)	Excessive multi-domain requests	Brute-Force
🇫🇮 paissangroup	2026-09-16 02:11:02 UTC · (1 month ago)	Multiple WAF Violations	Web App Attack
🇳🇱 ConsulHosting	2026-09-16 01:19:58 UTC · (1 month ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 23:18:20 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 35.241.113.220 (220.113.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:18:14.922018 2026] [security2:error] [pid 29614:ti ... show more (mod_security) mod_security (id:210492) triggered by 35.241.113.220 (220.113.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:18:14.922018 2026] [security2:error] [pid 29614:tid 29614] [client 35.241.113.220:51636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.shortprovincegirl.michaelsabbey.org"] [uri "/.git/config"] [unique_id "aqnSNpBqhNRr7dLAHdJXUAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-09-15 20:30:49 UTC · (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 65>=65, Abuse 60, NonEU, first-seen)	Hacking Exploited Host Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-15 18:30:07 UTC · (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 4server	2026-09-15 15:58:17 UTC · (1 month ago)	[TueSep1517:58:10.5212302026][security2:error][pid3481087:tid3481218][client35.241.113.220:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htac ... show more [TueSep1517:58:10.5212302026][security2:error][pid3481087:tid3481218][client35.241.113.220:0]ModSecurity:Accessdeniedwithcode403\(phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.studio-portale.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"aqlrEiYfUWGzU-1voLKuIAAAAlM\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-09-15 14:23:58 UTC · (1 month ago)	cloudlinux2 fail2ban: 2026-09-15 16:19:25,702 fail2ban.actions [1908]: NOTICE [plesk-modsecurity] Unban 103.189.201.172cloudlinux2 fail2ban: 2026-09-15 16:19:30,335 fail2ban.filter [1908]: INFO [plesk-wordpress] Found 125.122.153.2 ... show more cloudlinux2 fail2ban: 2026-09-15 16:19:25,702 fail2ban.actions [1908]: NOTICE [plesk-modsecurity] Unban 103.189.201.172cloudlinux2 fail2ban: 2026-09-15 16:19:30,335 fail2ban.filter [1908]: INFO [plesk-wordpress] Found 125.122.153.225 - 2026-09-15 16:19:29cloudlinux2 fail2ban: 2026-09-15 16:20:32,162 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 35.241.113.220 - 2026-09-15 16:20:32cloudlinux2 fail2ban: 2026-09-15 16:20:32,423 fail2ban.filter [1908]: INFO [recidive] Found 35.241.113.220 - 2026-09-15 16:20:32cloudlinux2 fail2ban: 2026-09-15 16:20:32,415 fail2ban.actions [1908]: NOTICE [plesk-modsecurity] Ban 35.241.113.220cloudlinux2 fail2ban: 2026-09-15 16:20:32,376 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 35.241.113.220 - 2026-09-15 16:20:32cloudlinux2 fail2ban: 2026-09-15 16:20:31,877 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 35.241.113.220 - 2026-09-15 16:20:31cloudlinux2 fail2ban: 2026-09-15 16:21:23,1 show less	Web App Attack
🇳🇱 Mangelot Hosting	2026-09-15 14:03:57 UTC · (1 month ago)	(modsecurity) srv103 ModSecurity 35.241.113.220 (HK/Hong Kong/220.113.241.35.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
Anonymous	2026-09-15 09:04:36 UTC · (1 month ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 213.209.159.175

🇵🇱 194.113.248.48

🇮🇩 182.10.105.243

🇪🇨 177.53.213.154

🇻🇳 222.255.174.161

🇮🇩 203.28.53.53

🇹🇹 181.118.49.144

🇩🇪 139.162.133.166

🇮🇩 116.254.97.155

🇫🇷 86.214.89.189

🇷🇺 46.242.14.92

🇺🇸 34.227.223.25

🇻🇳 27.71.98.105

🇫🇷 13.140.142.162

🇧🇷 177.63.108.92

🇩🇪 172.104.151.116

🇵🇰 115.42.70.199

🇧🇷 45.180.146.63

🇺🇸 45.147.233.145

🇻🇪 38.121.222.232