JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.198.12.5

35.198.12.5 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	5.12.198.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.198.12.5

Whois 35.198.12.5

IP Abuse Reports for 35.198.12.5:

This IP address has been reported a total of 31 times from 26 distinct sources. 35.198.12.5 was first reported on June 14th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 WellSpring	2026-06-15 08:42:42 (2 hours ago)	git exposure on 585.today/shop/.git/config — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 08:05:08 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.198.12.5 (5.12.198.35.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 35.198.12.5 (5.12.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:04:56.885979 2026] [security2:error] [pid 12154:tid 12154] [client 35.198.12.5:44620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starfrontiers.f4fbbs.com"] [uri "/app/.git/config"] [unique_id "ai-yKEsKafTaeSYcWXj1jAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 07:12:51 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.198.12.5 (5.12.198.35.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 35.198.12.5 (5.12.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:12:44.169401 2026] [security2:error] [pid 22977:tid 22977] [client 35.198.12.5:55462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "muskogeecleaning.com"] [uri "/build/.git/config"] [unique_id "ai-l7E1L6Y-VyeKJaZ-CdwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 thedreamer.nl	2026-06-15 05:38:07 (5 hours ago)	35.198.12.5 - - [15/Jun/2026:07:32:29 +0200] "GET /api/.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 ... show more 35.198.12.5 - - [15/Jun/2026:07:32:29 +0200] "GET /api/.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; FreeBSD i386; rv:28.0) Gecko/20100101 Firefox/28.0 SeaMonkey/2.25" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" 35.198.12.5 - - [15/Jun/2026:07:32:29 +0200] "GET /v3/.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Linux; Android 9; CLT-AL00 Build/HUAWEICLT-AL00; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/044807 Mobile Safari/537.36 MMWEBID/9069 MicroMessenger/7.0.6.1460(0x27000634) Process/tools NetType/WIFI Language/zh_CN" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" 35.198.12.5 - - [15/Jun/2026:07:32:29 +0200] "GET /app/.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610" 35.198.12.5 - - [15/Jun/2026:07:32:29 +0200] "GET /dashboard/.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (X11; Linux x ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇸🇪 KIDOS	2026-06-15 05:30:44 (6 hours ago)	CrowdSec detected malicious activity	DDoS Attack
🇸🇪 Johan Finn	2026-06-15 04:30:45 (7 hours ago)	malicious activity	Web App Attack
🇧🇾 lns.bz	2026-06-15 03:43:08 (7 hours ago)	Too many 404 requests [BY]	Web App Attack
🇨🇭 Origon	2026-06-15 02:06:03 (9 hours ago)	http-sensitive-files - IP: 35.198.12.5 - time="2026-06-15T04:06:02+02:00" level=info msg="(555f66b4 ... show more http-sensitive-files - IP: 35.198.12.5 - time="2026-06-15T04:06:02+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 35.198.12.5 (BR/396982) : 4h ban on Ip 35.198.12.5" module=db show less	Web App Attack
🇩🇪 4server	2026-06-15 02:01:32 (9 hours ago)	[MonJun1504:01:30.1486582026][security2:error][pid3235277:tid3235289][client35.198.12.5:0]ModSecurit ... show more [MonJun1504:01:30.1486582026][security2:error][pid3235277:tid3235289][client35.198.12.5:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"titraslochi.ch\"][uri\"/html/.git/config\"][unique_id\"ai9c-uE7X5SQZHlB7_17BQAAAMk\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-06-15 01:48:55 (9 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2026-06-15 01:37:26 (9 hours ago)	35.198.12.5 - - [15/Jun/2026:03:37:26 +0200] "GET /app/.git/config HTTP/1.1" 301 169 "-" "Mozilla/5. ... show more 35.198.12.5 - - [15/Jun/2026:03:37:26 +0200] "GET /app/.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.8.1.12) Gecko/20080303 SeaMonkey/1.1.8" show less	Web App Attack
🇬🇧 cybersteve99	2026-06-15 01:24:26 (10 hours ago)	Too many 4xx Requests -	Brute-Force Web App Attack
Anonymous	2026-06-15 01:06:11 (10 hours ago)	Trying to access config files	Web App Attack
🇺🇸 antlac1	2026-06-15 00:31:19 (10 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇬🇧 consul.to	2026-06-15 00:29:29 (11 hours ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇴 176.29.149.198

🇨🇭 81.62.135.233

🇱🇹 77.90.185.97

🇨🇳 202.105.98.252

🇺🇸 172.200.228.35

🇸🇪 171.25.158.47

🇺🇸 167.172.128.122

🇮🇩 103.168.137.74

🇵🇰 103.134.0.138

🇳🇱 91.92.40.7

🇫🇷 85.217.140.38

🇳🇱 45.148.10.183

🇺🇸 34.174.136.99

🇺🇸 20.64.105.53

🇨🇩 2c0f:e01:609:bd00:a9a1:6325:c572:6da2

🇨🇭 209.99.189.177

🇧🇷 201.1.69.152

🇫🇮 193.148.56.6

🇬🇧 185.216.145.167

🇨🇳 183.36.125.62