JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.252.169.131

35.252.169.131 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	131.169.252.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.252.169.131

Whois 35.252.169.131

IP Abuse Reports for 35.252.169.131:

This IP address has been reported a total of 27 times from 19 distinct sources. 35.252.169.131 was first reported on September 1st 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-09-02 06:09:19 (2 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇷🇴 iulianh	2026-09-02 06:01:34 (2 hours ago)	80,443	Brute-Force SSH
🇳🇱 Savvii	2026-09-02 04:56:03 (3 hours ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 04:50:47 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.252.169.131 (131.169.252.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.252.169.131 (131.169.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:50:42.788639 2026] [security2:error] [pid 21823:tid 21846] [client 35.252.169.131:52654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.totalbodycare753.kylight.com"] [uri "/.git/config"] [unique_id "aperIi-fVjWpdWm49f-bbwAAAVQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-02 04:43:48 (3 hours ago)	[WedSep0206:43:42.1772142026][security2:error][pid2247015:tid2247402][client35.252.169.131:0]ModSecu ... show more [WedSep0206:43:42.1772142026][security2:error][pid2247015:tid2247402][client35.252.169.131:0]ModSecurity:Accessdeniedwithcode403$phase1$.Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.total360.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"apepfsX6UbDGS9anUzWP6gAAAIA\"] show less	Hacking Web App Attack
Anonymous	2026-09-02 04:32:03 (3 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.test HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.e ... show more Bot / scanning and/or hacking attempts: GET /.env.test HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.remote HTTP/1.1, POST / HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.staging HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 masterguru	2026-09-02 04:03:31 (4 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇬🇧 consul.to	2026-09-02 02:59:28 (5 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 todix	2026-09-02 02:55:14 (5 hours ago)	WebAttack or semilar from 35.252.169.131	Web App Attack
🇩🇪 4server	2026-09-02 02:47:00 (5 hours ago)	[WedSep0204:46:55.6560412026][security2:error][pid832987:tid833224][client35.252.169.131:0]ModSecuri ... show more [WedSep0204:46:55.6560412026][security2:error][pid832987:tid833224][client35.252.169.131:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.torrimonda.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"apeOH_z2SKIOv_Yna3DbmwAAAIk\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 02:44:01 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.252.169.131 (131.169.252.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.252.169.131 (131.169.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:43:56.012934 2026] [security2:error] [pid 1042456:tid 1042464] [client 35.252.169.131:35134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.torreymanagement.com.torreydc.com"] [uri "/.git/config"] [unique_id "apeNbJHZ0DOpF4nuszEdXgAAAEM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-02 02:23:56 (5 hours ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
🇺🇸 mnsf	2026-09-02 02:05:23 (6 hours ago)	Abuse Detected (10)	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-02 00:57:42 (7 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 etu brutus	2026-09-02 00:22:08 (7 hours ago)	35.252.169.131 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:1036:1000:fa69:5fc1:8d14:fc14

🇹🇭 223.204.248.169

🇺🇸 159.65.37.189

🇵🇭 126.209.124.211

🇨🇳 112.66.185.99

🇺🇸 97.74.236.4

🇷🇴 80.94.92.55

🇲🇽 68.155.159.216

🇫🇷 2400:cb00:1036:1000:3ef6:14dd:9d01:ff18

🇪🇸 213.194.143.229

🇬🇧 209.97.129.94

🇧🇷 201.95.46.62

🇳🇱 195.178.110.232

🇷🇺 193.233.48.169

🇮🇹 185.206.85.17

🇺🇸 172.105.128.12

🇻🇳 161.248.239.20

🇮🇩 157.15.67.253

🇮🇳 150.129.28.63

🇧🇷 138.99.65.49