JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.192.250.139

35.192.250.139 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 70%: ?

70%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	139.250.192.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.192.250.139

Whois 35.192.250.139

IP Abuse Reports for 35.192.250.139:

This IP address has been reported a total of 19 times from 11 distinct sources. 35.192.250.139 was first reported on August 25th 2026, and the most recent report was 14 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-25 19:08:15 (14 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:08:08.482380 2026] [security2:error] [pid 3800:tid 3800] [client 35.192.250.139:27278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mewebdesign.com"] [uri "/.env"] [unique_id "ao3oGMZMzSm6huxI5_RTSgAAAEw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 18:11:26 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 14:11:22.023118 2026] [security2:error] [pid 5842:tid 5872] [client 35.192.250.139:58990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metropaint.net"] [uri "/.env"] [unique_id "ao3aypCtKrwHYJsj_q27aAAAANc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-08-25 18:00:19 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-25 17:54:56 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 13:54:50.871894 2026] [security2:error] [pid 27815:tid 27815] [client 35.192.250.139:34558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tgcindustrial.com"] [uri "/.git/config"] [unique_id "ao3W6s9rVFaTRoeCW0qzMgAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 17:32:53 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 13:32:45.827960 2026] [security2:error] [pid 26782:tid 26784] [client 35.192.250.139:60544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seal-block.com"] [uri "/.git/config"] [unique_id "ao3RveX5MpBdXPb8F6QKeQAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-08-25 17:08:56 (2 hours ago)	cloudlinux2 fail2ban: 2026-08-25 19:05:00,461 fail2ban.filter [1464]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-25 19:05:00,461 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 35.192.250.139 - 2026-08-25 19:05:00cloudlinux2 fail2ban: 2026-08-25 19:04:59,751 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 35.192.250.139 - 2026-08-25 19:04:59cloudlinux2 fail2ban: 2026-08-25 19:05:36,361 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.4.161 - 2026-08-25 19:05:36cloudlinux2 fail2ban: 2026-08-25 19:05:38,479 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.6.157 - 2026-08-25 19:05:38cloudlinux2 fail2ban: 2026-08-25 19:05:39,970 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.9.27 - 2026-08-25 19:05:39cloudlinux2 fail2ban: 2026-08-25 19:05:37,124 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.23.38 - 2026-08-25 19:05:36cloudlinux2 fail2ban: 2026-08-25 19:05:35,212 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 217.181.77.163 - 2026-08-25 19:05:34cloud show less	Web App Attack
🇩🇪 LRob	2026-08-25 16:53:39 (2 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.env (+1 more) \| 2026-08-25 16:53 UTC show less	Hacking Web App Attack
🇩🇪 todix	2026-08-25 16:43:33 (2 hours ago)	Web App Attack Exploid from 35.192.250.139	Web App Attack
🇺🇸 mnsf	2026-08-25 16:05:19 (3 hours ago)	Abuse Detected (9)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 15:52:51 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:52:47.503944 2026] [security2:error] [pid 3404:tid 3404] [client 35.192.250.139:65514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goodfor247.com"] [uri "/.git/config"] [unique_id "ao26T8ifV6qygD3ILzhyHAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-25 15:25:01 (3 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 15:15:56 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:15:51.404232 2026] [security2:error] [pid 27790:tid 27790] [client 35.192.250.139:19680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "customprintedinvitations.com"] [uri "/.git/config"] [unique_id "ao2xp96RXxz_mmkX93cfsAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Major Hostility	2026-08-25 14:55:22 (4 hours ago)	"GET /.env HTTP/1.1" 404 "GET /.env HTTP/1.1" 404	Web App Attack
🇬🇧 consul.to	2026-08-25 14:40:18 (4 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-08-25 14:38:51 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.192.250.139 (139.250.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:38:44.988206 2026] [security2:error] [pid 2118511:tid 2118571] [client 35.192.250.139:49244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metabotic.com"] [uri "/.env"] [unique_id "ao2o9A3boPt_upTV_JjANwAAAUw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.149.228.164

🇸🇬 190.92.208.40

🇺🇸 98.33.154.229

🇺🇸 2604:a880:400:d1::91e4:d001

🇺🇦 194.44.84.54

🇳🇱 176.65.148.106

🇸🇬 136.85.32.68

🇹🇳 102.157.102.27

🇺🇸 100.29.107.38

🇳🇱 45.148.10.141

🇮🇳 20.193.141.133

🇸🇬 165.232.164.223

🇨🇳 112.44.103.62

🇺🇸 85.208.96.210

🇹🇷 78.173.82.182

🇬🇧 35.203.210.66

🇨🇦 20.104.50.220

🇧🇪 198.235.24.128

🇨🇳 180.184.182.87

🇧🇷 179.125.217.38