JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

35.198.61.12

Recent Activity

Abuse Confidence Score

100% Critical

31 reports

24 reporters · latest 12 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 12.61.198.35.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

31 from 24 distinct reporters

First reported

November 5th 2026

Most recent report

12 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 9 🇳🇱 Netherlands 8 🇨🇿 Czechia 3

Most common categories Web App Attack 30 Bad Web Bot 10 Brute-Force 9 Hacking 7 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 JCB	2026-11-06 21:58:00 UTC · (12 hours ago)		Web App Attack
🇺🇸 jormaster3k	2026-11-06 09:44:35 UTC · (1 day ago)	Attack against Apache (too many 404s)	Web App Attack
Anonymous	2026-11-06 08:25:04 UTC · (1 day ago)	Bot / scanning and/or hacking attempts: GET /secrets.env HTTP/2.0, GET /config/.env HTTP/2.0, GET /secrets.yml HTTP/2.0, GET /.env.staging.local HTTP/2.0, GET /wrangler.toml HTTP/2.0, GET /railway.json HTTP/2.0, GET /.env.production.local HTTP/2.0, G ... show more Bot / scanning and/or hacking attempts: GET /secrets.env HTTP/2.0, GET /config/.env HTTP/2.0, GET /secrets.yml HTTP/2.0, GET /.env.staging.local HTTP/2.0, GET /wrangler.toml HTTP/2.0, GET /railway.json HTTP/2.0, GET /.env.production.local HTTP/2.0, GET /userfiles?path=../../../../.env HTTP/2.0 show less	Hacking Web App Attack
🇺🇸 joeyyax	2026-11-06 08:12:23 UTC · (1 day ago)	Tried env files ×2, cloud credentials ×1, Git metadata ×1, +1 more. Paths: /.env, /.aws/credentials, /proc/self/environ	Hacking Bad Web Bot Web App Attack
🇺🇸 lippard2748	2026-11-06 06:05:30 UTC · (1 day ago)	7 path traversal requests to /api/proc/self/environ, /api/console/api_server (params apis, file, path); 4 backup or dump requests: /env.bak, /env.old; 1 secrets file request: /.pypirc; forged X-Forwarded-For 10.138.152.136, 10.141.57.135. 2026-11-05T ... show more 7 path traversal requests to /api/proc/self/environ, /api/console/api_server (params apis, file, path); 4 backup or dump requests: /env.bak, /env.old; 1 secrets file request: /.pypirc; forged X-Forwarded-For 10.138.152.136, 10.141.57.135. 2026-11-05T23:58:59+00:00 to 2026-11-06T06:05:30+00:00. show less	Web App Attack
🇹🇷 Jova	2026-11-06 05:46:50 UTC · (1 day ago)	Requests impersonating 3 different crawlers from one IP.	Bad Web Bot
🇳🇱 Savvii	2026-11-06 04:46:00 UTC · (1 day ago)	20 attempts against mh-misbehave-ban on flow	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-11-06 03:08:19 UTC · (1 day ago)	20 attempts against mh-misbehave-ban on grape	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-11-06 02:10:55 UTC · (1 day ago)	[06/Nov/2026:04:10:55 +0200] -- 35.198.61.12 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /assets/manifest.json HTTP/1.1	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-11-06 02:08:33 UTC · (1 day ago)	20 attempts against mh-misbehave-ban on lunar	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-11-06 00:28:08 UTC · (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 82>=65, Abuse 94, NonEU, first-seen)	Hacking Exploited Host Web App Attack
🇷🇴 clauss	2026-11-05 22:52:02 UTC · (1 day ago)	35.198.61.12 - - [06/Nov/2026:00:52:02 +0200] "GET /api/.env.bak HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 35.198.61.12 - - [06/Nov/2026:00:52:02 +0200] "GET /.env.prod.bak HTTP/2.0" 403 146 "-" "Moz ... show more 35.198.61.12 - - [06/Nov/2026:00:52:02 +0200] "GET /api/.env.bak HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 35.198.61.12 - - [06/Nov/2026:00:52:02 +0200] "GET /.env.prod.bak HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" ... show less	Web App Attack
🇺🇸 mad-abuseip	2026-11-05 22:51:01 UTC · (1 day ago)	SCORE:99 REASON:suspicious-score:100 \| "GET /api/console/api_server?apis=../../../../../../proc/self/environ&sense_version=%40%40SENSE_VERSION HTTP/1.1" SCORE:99 REASON:suspicious-score:100 - "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compa ... show more SCORE:99 REASON:suspicious-score:100 \| "GET /api/console/api_server?apis=../../../../../../proc/self/environ&sense_version=%40%40SENSE_VERSION HTTP/1.1" SCORE:99 REASON:suspicious-score:100 - "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +***@anthropic.com)" show less	Web App Attack
🇺🇸 IndigoRidge	2026-11-05 22:04:53 UTC · (1 day ago)	35.198.61.12 - - [05/Nov/2026:17:04:50 -0500] "GET /public../.env HTTP/1.1" 404 52415 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 35.198.61.12 - - [05/Nov/2026:17:04:49 -0500] "GET /img../.env HTTP/1.1" 404 52415 "-" "Moz ... show more 35.198.61.12 - - [05/Nov/2026:17:04:50 -0500] "GET /public../.env HTTP/1.1" 404 52415 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 35.198.61.12 - - [05/Nov/2026:17:04:49 -0500] "GET /img../.env HTTP/1.1" 404 52415 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 35.198.61.12 - - [05/Nov/2026:17:04:49 -0500] "GET /css../.env HTTP/1.1" 404 52415 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" ... show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-11-05 21:57:39 UTC · (1 day ago)	Brute force login attempts	Hacking Web App Attack Brute-Force

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 192.252.215.125

🇨🇳 112.64.57.25

🇲🇺 102.113.170.129

🇹🇭 223.206.238.96

🇷🇺 213.234.8.114

🇺🇸 205.169.39.8

🇲🇽 189.203.45.25

🇸🇳 154.125.228.145

🇮🇩 103.174.238.9

🇺🇸 91.193.232.126

🇳🇱 86.38.187.33

🇺🇸 70.183.233.130

🇳🇱 45.148.10.152

🇬🇧 31.14.254.47

🇨🇳 1.24.16.169

🇦🇿 212.47.132.90

🇦🇷 153.67.181.69

🇫🇮 147.185.133.239

🇲🇦 105.69.126.236

🇫🇷 91.196.152.99