JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.241.120.252

35.241.120.252 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 77%: ?

77%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	252.120.241.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.241.120.252

Whois 35.241.120.252

IP Abuse Reports for 35.241.120.252:

This IP address has been reported a total of 21 times from 13 distinct sources. 35.241.120.252 was first reported on September 15th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-16 22:01:22 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-15. show less	Web App Attack SSH Hacking
Anonymous	2026-09-16 05:10:02 (4 days ago)	suspicious request in access.log	Web App Attack
🇩🇪 EGP Abuse Dept	2026-09-16 04:52:19 (4 days ago)	Scanning for web/db/file exploits on www.nachtvandeviool.nl	SQL Injection Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 03:00:59 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:00:54.340817 2026] [security2:error] [pid 6296:tid 6321] [client 35.241.120.252:60834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.n2play.com.n2play.net"] [uri "/.git/config"] [unique_id "aqoGZoh2goTvRY1sV5wnrgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-16 02:30:56 (4 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 01:36:40 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:36:33.346598 2026] [security2:error] [pid 1867558:tid 1867558] [client 35.241.120.252:41506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sophie.hotelausland.com"] [uri "/.git/config"] [unique_id "aqnyoUUUWHO-uTwxYtRAhwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-16 00:49:16 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-16 00:15:17 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:15:10.072914 2026] [security2:error] [pid 24188:tid 24311] [client 35.241.120.252:56486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.soonervolunteer.jameskeeton.com"] [uri "/.git/config"] [unique_id "aqnfjqkbounfB1-xo4r-swAAANQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-15 22:00:15 (4 days ago)	Auto-ban: >3000 req/min op 2026-09-15	Web App Attack SSH Hacking
Anonymous	2026-09-15 21:41:58 (4 days ago)	SOHODE WEBEXPLOIT 35.241.120.252 (252.120.241.35.bc.googleusercontent.com)	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:37:44 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:37:39.067933 2026] [security2:error] [pid 25966:tid 25966] [client 35.241.120.252:45912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.songsbill.virlouise.com"] [uri "/.git/config"] [unique_id "aqmeg4rcgjvmSeNxGtsHtAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:22:31 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:22:25.570139 2026] [security2:error] [pid 24397:tid 24397] [client 35.241.120.252:53922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.songforana.michaelsabbey.org"] [uri "/.git/config"] [unique_id "aqma8Y9qI0ciM4RrlrKr-wAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:02:03 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.241.120.252 (252.120.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:01:57.590967 2026] [security2:error] [pid 475:tid 475] [client 35.241.120.252:54234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.taptaptennis.abecasis.com"] [uri "/.git/config"] [unique_id "aqmWJS6AcNI23SuoJUfMeQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 zynex	2026-09-15 13:31:00 (5 days ago)	URL Probing: /web/.env	Web App Attack
Anonymous	2026-09-15 12:50:37 (5 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.239

🇨🇱 181.162.255.190

🇷🇺 178.178.194.137

🇪🇸 172.68.134.151

🇮🇶 169.224.15.128

🇧🇪 169.155.241.135

🇰🇷 118.220.149.121

🇺🇸 24.184.182.236

🇺🇸 24.167.235.86

🇺🇸 24.166.103.143

🇨🇳 1.12.55.42

🇳🇱 205.147.16.236

🇮🇶 204.157.177.84

🇷🇺 178.178.194.135

🇳🇱 176.65.148.38

🇭🇰 156.225.1.10

🇺🇸 136.36.189.65

🇴🇲 88.218.201.20

🇬🇷 85.75.121.247

🇳🇱 45.142.193.169