JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.247.251.222

35.247.251.222 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 73%: ?

73%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	222.251.247.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.247.251.222

Whois 35.247.251.222

IP Abuse Reports for 35.247.251.222:

This IP address has been reported a total of 15 times from 12 distinct sources. 35.247.251.222 was first reported on September 3rd 2026, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-04 00:53:23 (21 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.247.251.222 (222.251.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.251.222 (222.251.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 20:53:16.722083 2026] [security2:error] [pid 17997:tid 17997] [client 35.247.251.222:32830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "feathersolar.com"] [uri "/app/.git/config"] [unique_id "apoWfGPJIRVmSDmgz2zcTQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-09-04 00:46:37 (28 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 raph	2026-09-03 20:03:24 (5 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 18:33:17 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.247.251.222 (222.251.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.251.222 (222.251.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 14:33:13.965546 2026] [security2:error] [pid 12065:tid 12065] [client 35.247.251.222:47324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memelearning.net"] [uri "/site/.git/config"] [unique_id "apm9adITschzxL7dRSNzKgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-09-03 18:09:28 (7 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-03 16:33:02 (8 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 Vegascosmetics	2026-09-03 16:28:34 (8 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git) show less	Hacking Brute-Force Web App Attack
Anonymous	2026-09-03 13:45:19 (11 hours ago)	Observed scanned 12 known-sensitive endpoint(s), e.g.: /.git/config, /api/.git/config, /app/.git/con ... show more Observed scanned 12 known-sensitive endpoint(s), e.g.: /.git/config, /api/.git/config, /app/.git/config, /backend/.git/config, /htdocs/.git/config, /html/.git/config show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 12:14:50 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.247.251.222 (222.251.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.251.222 (222.251.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 08:14:44.712553 2026] [security2:error] [pid 17787:tid 17787] [client 35.247.251.222:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.365soft.top"] [uri "/www/.git/config"] [unique_id "aplktBSeRYzassDgt8YEsgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-09-03 08:30:51 (16 hours ago)	Git config exposure probe	Web App Attack
🇬🇧 consul.to	2026-09-03 08:02:47 (17 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-03 07:34:59 (17 hours ago)	[03/Sep/2026:10:34:59 +0300] -- 35.247.251.222 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.gi ... show more [03/Sep/2026:10:34:59 +0300] -- 35.247.251.222 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-09-03 07:20:11 (17 hours ago)		Web App Attack
Anonymous	2026-09-03 06:06:11 (19 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-09-03 05:00:42 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.247.251.222 (222.251.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.251.222 (222.251.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 01:00:38.081334 2026] [security2:error] [pid 27004:tid 27004] [client 35.247.251.222:37128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "patrick.grimone.com"] [uri "/public/.git/config"] [unique_id "apj-9kuv1CM2L5m1pKS8owAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.4.114.78

🇳🇱 176.65.148.243

🇺🇸 172.104.19.160

🇬🇧 144.126.197.184

🇻🇳 113.184.47.55

🇷🇺 95.55.84.7

🇬🇧 2.57.17.123

🇭🇰 221.126.70.86

🇲🇽 201.149.36.12

🇧🇷 179.98.31.148

🇺🇸 165.154.206.215

🇪🇬 156.167.171.247

🇺🇸 154.197.57.70

🇧🇷 138.36.7.60

🇨🇳 123.138.79.104

🇺🇸 75.240.199.127

🇺🇸 64.62.197.210

🇺🇸 23.95.122.72

🇦🇺 203.27.73.0

🇺🇸 198.16.47.246