35.198.28.2
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Google LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS396982
- Hostname(s)
- 2.28.198.35.bc.googleusercontent.com
- Domain Name
- google.com
- Country
- 🇧🇷 Brazil
- City
- Sao Paulo, Sao Paulo
Abuse Reports
Total reports
42 from
39 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 joeyyax |
Tried env files ×15. Paths: /*/.env, /api/.env, /static/.env
|
Bad Web Bot Web App Attack | |
| 🇵🇱 Budyn |
|
Hacking Web App Attack | |
| 🇩🇪 Bedios GmbH |
Scanning for exposed credentials and private keys
|
Hacking | |
| 🇵🇱 strefapi_com |
Brute-force, web
...
|
Hacking Brute-Force Web App Attack | |
| 🇬🇧 Aetherweb Ark |
(mod_security) mod_security (id:949110) triggered by 35.198.28.2 (BR/Brazil/2.28.198.35.bc.googleusercontent.com): N in the last X secs
|
Web App Attack | |
| 🇩🇪 pscriptos |
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
|
Web App Attack Hacking | |
| 🇺🇸 infra-monitor |
Automated ban via infra-monitor: mgmt-path-probe, suspicious-probe, wp-sensitive-paths, +8 more
|
Port Scan Hacking Bad Web Bot Web App Attack | |
| 🇩🇪 Blexyel |
35.198.28.2 - - [06/Nov/2026:08:54:28 +0100] "GET /.git/config%3F.css HTTP/1.1" 422 496 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
|
Brute-Force Web App Attack | |
| 🇩🇪 brechtr |
[Press84-BanHammer] 404 flood — 30 hits in 60s — Sourced from: www.langsvlaamsewegen.be — Request: GET /invite
|
Bad Web Bot Web App Attack | |
| 🇩🇪 TheDjRider |
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-11-06T07:42:07.869494498Z. Context: http_status=404
|
Web App Attack | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): Abuse 100 / BAN. IP is on the AbuseIPDB blacklist and was blocked on the first request.
|
Hacking Exploited Host Web App Attack | |
| 🇵🇱 Budyn |
|
Hacking Web App Attack | |
| 🇫🇷 EDSL |
[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 80)
|
Port Scan Hacking Web App Attack | |
| 🇺🇸 jormaster3k |
Attack against Apache (too many 404s)
|
Web App Attack | |
| 🇩🇰 donkzquixote |
Scan for exploitable WordPress files/information, or other brute force attempts.
|
Web App Attack Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown