JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

35.252.119.129

Neutral Activity

Abuse Confidence Score

0% Low Risk

39 reports

32 reporters · latest 2 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 129.119.252.35.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: The Dalles, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

35.252.119.129 has been reported 39 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

39 from 32 distinct reporters

First reported

August 25th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-27 21:59:48 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-26.	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-08-27 07:38:39 (2 months ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 homeshowdomain.nl	2026-08-26 21:59:28 (2 months ago)	Auto-ban: >3000 req/min op 2026-08-26	Web App Attack SSH Hacking
🇲🇾 Rizzy	2026-08-26 18:13:18 (2 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇷🇺 DZBOT	2026-08-26 18:10:48 (2 months ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇨🇭 4server	2026-08-26 18:10:46 (2 months ago)	[WedAug2620:10:42.9953582026][security2:error][pid1426573:tid1426617][client35.252.119.129:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"9607 ... show more [WedAug2620:10:42.9953582026][security2:error][pid1426573:tid1426617][client35.252.119.129:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"labaita-lanzo.it\"][uri\"/@fs/../.env\"][unique_id\"ao8sIkoezOOKVAq4dFC0ggAAARQ\"] show less	Hacking Web App Attack
🇳🇱 Savvii	2026-08-26 18:07:41 (2 months ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-26 17:23:04 (2 months ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.env.local (+6 more) \| 2026-08-26 17:23 UTC	Hacking Web App Attack
🇪🇸 alferez	2026-08-26 17:17:47 (2 months ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇳🇱 melroy89	2026-08-26 15:10:15 (2 months ago)	35.252.119.129 - - [26/Aug/2026:17:09:11 +0200] "GET /assets../../../etc/passwd HTTP/1.1" 400 193 "-" "-" "openaccountant.nl" 0.582 35.252.119.129 - - [26/Aug/2026:17:09:12 +0200] "GET /download?file=../../../../etc/passwd HTTP/1.1" 403 524 "https: ... show more 35.252.119.129 - - [26/Aug/2026:17:09:11 +0200] "GET /assets../../../etc/passwd HTTP/1.1" 400 193 "-" "-" "openaccountant.nl" 0.582 35.252.119.129 - - [26/Aug/2026:17:09:12 +0200] "GET /download?file=../../../../etc/passwd HTTP/1.1" 403 524 "https://openaccountant.nl/download?file=../../../../etc/passwd" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.2413.43 Safari/537.36; compatible; Claude-User/1.0; [email protected]" "finatec.nl" 0.001 35.252.119.129 - - [26/Aug/2026:17:09:12 +0200] "GET /@fs/proc/self/environ HTTP/1.1" 403 524 "https://openaccountant.nl/@fs/proc/self/environ" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/133.0.1755.208 Mobile Safari/537.36" "finatec.nl" 0.000 35.252.119.129 - - [26/Aug/2026:17:09:12 +0200] "GET /media../etc/passwd HTTP/1.1" 403 524 "https://openaccountant.nl/media../etc/pa ... show less	Web App Attack
Anonymous	2026-08-26 14:57:20 (2 months ago)	35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /api/config HTTP/1.1" 403 12583 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /?file=../../../../etc/pas ... show more 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /api/config HTTP/1.1" 403 12583 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /?file=../../../../etc/passwd HTTP/1.1" 403 12583 "-" "Mozilla/5.0 (compatible; WhatsApp/10.0.2.1)" 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /aws/credentials HTTP/1.1" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/134.0.5637.173 Mobile Safari/537.36" 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /static../.aws/credentials HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 35.252.119.129 - - [26/ ... show less	Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-08-26 14:28:21 (2 months ago)	.env scanning [BY]	Web App Attack
Anonymous	2026-08-26 11:01:03 (2 months ago)	Bot / scanning and/or hacking attempts: GET /firebase-adminsdk.json HTTP/1.1, GET /credentials HTTP/1.1, GET /.aws/ecs-task-credentials HTTP/1.1, GET /fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidenti, GET /.continue/config.json HTTP/1.1, GE ... show more Bot / scanning and/or hacking attempts: GET /firebase-adminsdk.json HTTP/1.1, GET /credentials HTTP/1.1, GET /.aws/ecs-task-credentials HTTP/1.1, GET /fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidenti, GET /.continue/config.json HTTP/1.1, GET /.openai/config.json HTTP/1.1, GET /..;/..;/.aws/credentials HTTP/1.1, GET /google-credentials.json HTTP/1.1, GET /proxy?url=file%3A%2F%2F%2Froot%2F.env HTTP/1.1, GET /vendor/aws/credentials HTTP/1.1, GET /.aws/ecs-task-credentials.json HTTP/1.1, GET /public/env.js HTTP/1.1, GET /config/credentials.json HTTP/1.1, GET /read?url=file:///proc/1/environ HTTP/1.1, GET /actuator/logfile HTTP/1.1, GET /api/v1/credentials HTTP/1.1, GET /credentials.json HTTP/1.1, GET /.env.development.local HTTP/1.1, GET /?file=../../.env HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-08-26 10:45:12 (2 months ago)	Bot / seems abusive / Apache connections: 107	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2026-08-26 10:35:01 (2 months ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.30

🇨🇷 190.211.112.98

🇦🇷 190.174.208.7

🇻🇪 190.73.79.26

🇧🇷 189.89.80.39

🇸🇬 185.200.116.76

🇮🇩 172.232.232.179

🇩🇪 165.22.16.38

🇩🇪 151.243.11.192

🇨🇳 115.190.188.201

🇺🇸 91.230.168.160

🇻🇪 38.137.234.217

🇧🇪 35.210.53.157

🇨🇳 14.153.235.148

🇺🇸 2001:470:1:fb5::23e

🇹🇼 198.235.24.115

🇳🇱 193.47.62.111

🇬🇧 193.8.186.31

🇳🇱 192.142.15.34

🇲🇽 189.224.55.139