JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.197.8.248

35.197.8.248 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 70%: ?

70%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	248.8.197.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.197.8.248

Whois 35.197.8.248

IP Abuse Reports for 35.197.8.248:

This IP address has been reported a total of 14 times from 13 distinct sources. 35.197.8.248 was first reported on July 10th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MarkGGN	2026-07-12 18:00:21 (4 days ago)	Web attack. [1783701318] [0] [www.] [#4872188] [0] [2] [35.197.8.248] [403] [GET] [/index.php] [Use ... show more Web attack. [1783701318] [0] [www.] [#4872188] [0] [2] [35.197.8.248] [403] [GET] [/index.php] [User enumeration scan (author archives)] [hex:617574686f723d31] [1783701318] [0] [www.*] [#5236651] [0] [2] [35.197.8.248] [403] [GET] [/index.php] [User enumeration scan (author archives)] [hex:617574686f723d32] show less	Web App Attack
🇧🇪 cmbplf	2026-07-10 18:28:26 (6 days ago)	951 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 mnsf	2026-07-10 17:05:54 (1 week ago)	Abuse Detected (16)	Brute-Force Web App Attack
🇨🇭 4server	2026-07-10 16:37:20 (1 week ago)	[FriJul1018:37:13.3262692026][security2:error][pid1822989:tid1823017][client35.197.8.248:0]ModSecuri ... show more [FriJul1018:37:13.3262692026][security2:error][pid1822989:tid1823017][client35.197.8.248:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.mondo-it.ch\"][uri\"/xmlrpc.php\"][unique_id\"alEfuRGLRJbqlI_e5tSW7QAAAUw\"] show less	Hacking Web App Attack
🇮🇹 🐷🐷🐷	2026-07-10 16:36:31 (1 week ago)	Multiple WordPress unauthorized access attempts ...	Brute-Force Bad Web Bot
🇩🇪 MarkGGN	2026-07-10 16:35:19 (1 week ago)	Web attack. 35.197.8.248 - - [10/Jul/2026:18:35:17 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1. ... show more Web attack. 35.197.8.248 - - [10/Jul/2026:18:35:17 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 35.197.8.248 - - [10/Jul/2026:18:35:19 +0200] "GET //wp-json/wp/v2/users/ HTTP/1.1" 403 103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Web App Attack
🇫🇷 masterguru	2026-07-10 16:33:04 (1 week ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)	Hacking
Anonymous	2026-07-10 16:31:15 (1 week ago)	[ns41.kdns.gr] httpd-xmlrpc-post: sites=www.medisto.gr; logs=/var/log/httpd/domains/medisto.gr.log; ... show more [ns41.kdns.gr] httpd-xmlrpc-post: sites=www.medisto.gr; logs=/var/log/httpd/domains/medisto.gr.log; samples=//xmlrpc.php show less	Brute-Force Web App Attack
🇮🇹 VHosting	2026-07-10 16:30:04 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 16:29:51 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 35.197.8.248 (248.8.197.35.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 35.197.8.248 (248.8.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 12:29:44.265209 2026] [security2:error] [pid 5733:tid 5733] [client 35.197.8.248:55668] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|medusakenya.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "medusakenya.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alEd-C-uK826snxva7NH8QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇹 Evag Touf	2026-07-10 15:45:30 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.197.8.248 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.197.8.248 (US/United States/-) show less	Bad Web Bot
🇷🇺 DZBOT	2026-07-10 15:38:33 (1 week ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇻🇳 hirosume2	2026-07-10 15:30:08 (1 week ago)	DDoS composite score 22.5 (challenge tier) - 10 reqs/5min - high_traffic	DDoS Attack
🇵🇱 sefinek.net	2026-07-10 15:25:36 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.240.117.71

🇳🇱 195.178.110.228

🇨🇭 193.32.127.226

🇷🇺 188.168.159.80

🇺🇸 162.216.149.69

🇭🇰 118.193.36.56

🇨🇮 102.209.216.172

🇬🇧 87.106.44.172

🇺🇸 45.156.129.48

🇺🇸 44.200.190.233

🇯🇵 14.3.101.74

🇮🇩 202.145.0.61

🇦🇷 190.245.146.99

🇲🇽 177.227.68.24

🇺🇸 172.177.143.154

🇭🇰 101.36.122.183

🇫🇮 46.29.26.195

🇺🇸 20.55.73.223

🇷🇴 2.57.121.112

🇺🇸 217.60.97.170