JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.252.119.129

35.252.119.129 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	129.119.252.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.252.119.129

Whois 35.252.119.129

IP Abuse Reports for 35.252.119.129:

This IP address has been reported a total of 39 times from 32 distinct sources. 35.252.119.129 was first reported on August 25th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-27 21:59:48 (13 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-26. show less	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-08-27 07:38:39 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 homeshowdomain.nl	2026-08-26 21:59:28 (1 day ago)	Auto-ban: >3000 req/min op 2026-08-26	Web App Attack SSH Hacking
🇲🇾 Rizzy	2026-08-26 18:13:18 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇷🇺 DZBOT	2026-08-26 18:10:48 (1 day ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇨🇭 4server	2026-08-26 18:10:46 (1 day ago)	[WedAug2620:10:42.9953582026][security2:error][pid1426573:tid1426617][client35.252.119.129:0]ModSecu ... show more [WedAug2620:10:42.9953582026][security2:error][pid1426573:tid1426617][client35.252.119.129:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"labaita-lanzo.it\"][uri\"/@fs/../.env\"][unique_id\"ao8sIkoezOOKVAq4dFC0ggAAARQ\"] show less	Hacking Web App Attack
🇳🇱 Savvii	2026-08-26 18:07:41 (1 day ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-26 17:23:04 (1 day ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.env.local (+6 more) \| 2026-08-26 17:23 UTC show less	Hacking Web App Attack
🇪🇸 alferez	2026-08-26 17:17:47 (1 day ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇳🇱 melroy89	2026-08-26 15:10:15 (1 day ago)	35.252.119.129 - - [26/Aug/2026:17:09:11 +0200] "GET /assets../../../etc/passwd HTTP/1.1" 400 193 " ... show more 35.252.119.129 - - [26/Aug/2026:17:09:11 +0200] "GET /assets../../../etc/passwd HTTP/1.1" 400 193 "-" "-" "openaccountant.nl" 0.582 35.252.119.129 - - [26/Aug/2026:17:09:12 +0200] "GET /download?file=../../../../etc/passwd HTTP/1.1" 403 524 "https://openaccountant.nl/download?file=../../../../etc/passwd" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.2413.43 Safari/537.36; compatible; Claude-User/1.0; [email protected]" "finatec.nl" 0.001 35.252.119.129 - - [26/Aug/2026:17:09:12 +0200] "GET /@fs/proc/self/environ HTTP/1.1" 403 524 "https://openaccountant.nl/@fs/proc/self/environ" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/133.0.1755.208 Mobile Safari/537.36" "finatec.nl" 0.000 35.252.119.129 - - [26/Aug/2026:17:09:12 +0200] "GET /media../etc/passwd HTTP/1.1" 403 524 "https://openaccountant.nl/media../etc/pa ... show less	Web App Attack
Anonymous	2026-08-26 14:57:20 (1 day ago)	35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /api/config HTTP/1.1" 403 12583 "-" "Mozilla/5. ... show more 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /api/config HTTP/1.1" 403 12583 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /?file=../../../../etc/passwd HTTP/1.1" 403 12583 "-" "Mozilla/5.0 (compatible; WhatsApp/10.0.2.1)" 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /aws/credentials HTTP/1.1" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/134.0.5637.173 Mobile Safari/537.36" 35.252.119.129 - - [26/Aug/2026:16:57:20 +0200] "GET /static../.aws/credentials HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 35.252.119.129 - - [26/ ... show less	Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-08-26 14:28:21 (1 day ago)	.env scanning [BY]	Web App Attack
Anonymous	2026-08-26 11:01:03 (2 days ago)	Bot / scanning and/or hacking attempts: GET /firebase-adminsdk.json HTTP/1.1, GET /credentials HTTP/ ... show more Bot / scanning and/or hacking attempts: GET /firebase-adminsdk.json HTTP/1.1, GET /credentials HTTP/1.1, GET /.aws/ecs-task-credentials HTTP/1.1, GET /fetch?url=http%3A%2F%2F169.254.169.254%2Fmetadata%2Fidenti, GET /.continue/config.json HTTP/1.1, GET /.openai/config.json HTTP/1.1, GET /..;/..;/.aws/credentials HTTP/1.1, GET /google-credentials.json HTTP/1.1, GET /proxy?url=file%3A%2F%2F%2Froot%2F.env HTTP/1.1, GET /vendor/aws/credentials HTTP/1.1, GET /.aws/ecs-task-credentials.json HTTP/1.1, GET /public/env.js HTTP/1.1, GET /config/credentials.json HTTP/1.1, GET /read?url=file:///proc/1/environ HTTP/1.1, GET /actuator/logfile HTTP/1.1, GET /api/v1/credentials HTTP/1.1, GET /credentials.json HTTP/1.1, GET /.env.development.local HTTP/1.1, GET /?file=../../.env HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-08-26 10:45:12 (2 days ago)	Bot / seems abusive / Apache connections: 107	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2026-08-26 10:35:01 (2 days ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 216.57.110.81

🇹🇹 181.118.50.55

🇺🇸 47.251.117.40

🇧🇷 45.205.1.246

🇺🇸 20.163.38.158

🇨🇳 211.90.189.195

🇹🇼 211.22.222.251

🇺🇸 209.85.160.179

🇮🇩 182.8.65.136

🇸🇬 152.42.185.249

🇩🇪 151.243.11.16

🇦🇪 94.200.66.6

🇫🇷 91.231.89.238

🇺🇸 52.224.109.126

🇺🇸 35.255.66.118

🇨🇳 222.139.205.246

🇨🇳 219.147.109.6

🇲🇽 189.204.230.91

🇬🇭 179.64.71.218

🇫🇷 139.28.219.68