35.199.113.161

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
29 reports
25 reporters · latest 1 week ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
161.113.199.35.bc.googleusercontent.com
Domain Name
google.com
Country
🇧🇷 Brazil
City
Sao Paulo, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
29 from 25 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 8 🇨🇿 Czechia 5 🇳🇱 Netherlands 5
Most common categories Web App Attack 22 Hacking 10 Brute-Force 8 Bad Web Bot 7 SQL Injection 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2026-11-03
Web App Attack SSH Hacking
🇵🇱 mscode.pl
Triggered Cloudflare WAF (firewallCustom) from BR. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (GET method) Zone: cms.mscode.pl Endpoint: /__vite_rsc_findSourceMapURL UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)
Bad Web Bot
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02]
Hacking SQL Injection Web App Attack
🇩🇪 BlueWire Hosting
Bad bot ignoring robot.txt
Bad Web Bot
🇰🇷 fanbinit
Repeated HTTP requests for sensitive configuration or repository paths.
Web App Attack
🇮🇹 Inartis
Brute-Force Bad Web Bot Web App Attack
🇿🇦 vanderhost
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/firebase-admin.json via rule: /config
Web App Attack Bad Web Bot
🇳🇴 jad-abuse
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: credential_file, env_probe. Observed by 1 sensor(s); 54 hits.
Web App Attack
🇩🇪 Hazzard
(PERMBLOCK) 35.199.113.161 (BR/Brazil/São Paulo/São Paulo/161.113.199.35.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
Hacking
Anonymous
35.199.113.161 - - [03/Nov/2026:13:38:57 +0100] "GET /.env.swp HTTP/2.0" 403 268 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0;
Web Spam Blog Spam Brute-Force Web App Attack
Anonymous
IP matched detection query 50 and more bad rqs apache.
Hacking Bad Web Bot Brute-Force Web App Attack
🇳🇱 debestelapp
Web App Attack
🇳🇱 WeCloudit-Anti-Abuse
This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773
Web App Attack Hacking
Anonymous
IP matched detection query 20 more in short time bad rqs.
Brute-Force Web App Attack Hacking
Anonymous
Blocked by ModSec and CSF
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇷 213.194.117.65
🇺🇸 199.165.159.130
🇳🇱 195.178.110.30
🇩🇪 104.165.72.85
🇸🇬 101.32.108.27
🇩🇪 63.179.48.119
🇺🇸 43.173.76.45
🇺🇸 199.165.159.154
🇩🇪 167.94.145.26
🇺🇸 100.31.109.160
🇺🇸 100.27.62.12
🇮🇪 79.97.100.66
🇩🇪 64.89.160.251
🇬🇧 35.203.210.60
🇰🇿 213.232.247.255
🇩🇪 167.94.146.41
🇭🇳 149.86.161.139
🇭🇰 129.226.166.199
🇳🇱 109.160.32.172
🇩🇪 77.14.16.137
feedback