JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.189.47.152

35.189.47.152 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 87%: ?

87%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	152.47.189.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.189.47.152

Whois 35.189.47.152

IP Abuse Reports for 35.189.47.152:

This IP address has been reported a total of 22 times from 14 distinct sources. 35.189.47.152 was first reported on August 31st 2026, and the most recent report was 45 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-09-01 05:49:14 (45 minutes ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.189.47.152 (AU/Australia/152.47. ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.189.47.152 (AU/Australia/152.47.189.35.bc.googleusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇳🇱 Mangelot Hosting	2026-09-01 03:20:39 (3 hours ago)	(modsecurity) srv101 ModSecurity 35.189.47.152 (AU/Australia/152.47.189.35.bc.googleusercontent.com) ... show more (modsecurity) srv101 ModSecurity 35.189.47.152 (AU/Australia/152.47.189.35.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-31 22:00:55 (8 hours ago)	Auto-ban: >3000 req/min op 2026-08-31	Web App Attack SSH Hacking
🇧🇾 lns.bz	2026-08-31 16:13:32 (14 hours ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 15:06:46 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 11:06:39.878306 2026] [security2:error] [pid 16253:tid 16253] [client 35.189.47.152:45006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drinktopit.sendalawyerletter.com"] [uri "/.git/config"] [unique_id "apWYfxmnZQzoThn7Lgxs5QAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 14:12:00 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:11:56.747168 2026] [security2:error] [pid 26794:tid 26835] [client 35.189.47.152:37594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.driftwoodblue.newleafpro.com"] [uri "/.git/config"] [unique_id "apWLrBebOxB-qAQvKFx1rwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 13:48:02 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:47:58.331731 2026] [security2:error] [pid 10157:tid 10157] [client 35.189.47.152:42286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drhoss.solidthought.com"] [uri "/.git/config"] [unique_id "apWGDshomtLJKm6hGK_o-wAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 13:23:49 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:23:45.639562 2026] [security2:error] [pid 14697:tid 14697] [client 35.189.47.152:58428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drgas.com.scottwithers.xyz"] [uri "/.git/config"] [unique_id "apWAYVl4DEJ2FBnDm_vGtwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-31 12:46:23 (17 hours ago)	Excessive multi-domain requests	Brute-Force
🇧🇷 Halux	2026-08-31 11:55:36 (18 hours ago)	35.189.47.152 Probing protected path or service	Web App Attack
Anonymous	2026-08-31 11:00:03 (19 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 10:52:35 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:52:29.669562 2026] [security2:error] [pid 1098:tid 1098] [client 35.189.47.152:42968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dreamlikeitmatters.whatifandwhynot.xyz"] [uri "/.git/config"] [unique_id "apVc7dhm1rKed6SJUVZLQQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 10:35:30 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:35:23.415076 2026] [security2:error] [pid 30393:tid 30393] [client 35.189.47.152:52702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dreamhome.dhappraisalservices.com"] [uri "/.git/config"] [unique_id "apVY60mAw_E7bNth3tYzbwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 pipeline.es	2026-08-31 09:58:04 (20 hours ago)	Web scanning / probing for vulnerable paths \| URL: /laravel5/.env \| Evidence: dreamandfly.pt 35.189. ... show more Web scanning / probing for vulnerable paths \| URL: /laravel5/.env \| Evidence: dreamandfly.pt 35.189.47.152 - - [31/Aug/2026:11:57:29 +0200] \"GET /laravel5/.env HTTP/1.1\" 404 20946 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=AU \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: AU show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 08:34:36 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.189.47.152 (152.47.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:34:28.769587 2026] [security2:error] [pid 16755:tid 16755] [client 35.189.47.152:51834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drbbenefits.com"] [uri "/.git/config"] [unique_id "apU8lGp5IscWJkwQomfjdAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇭 143.44.184.16

🇦🇲 217.113.13.21

🇺🇸 206.81.5.145

🇮🇳 203.145.143.163

🇧🇷 201.71.192.108

🇩🇪 194.88.98.114

🇧🇷 186.209.77.236

🇵🇭 175.158.203.215

🇨🇳 115.190.126.161

🇺🇸 65.49.1.152

🇳🇱 45.74.28.2

🇪🇸 37.132.28.200

🇺🇸 20.172.192.249

🇮🇷 2.180.32.104

🇬🇧 213.166.84.50

🇧🇷 205.210.31.246

🇧🇪 198.235.24.164

🇫🇷 85.69.240.210

🇪🇸 83.46.109.35

🇺🇸 205.210.31.49