JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.239.148.54

35.239.148.54 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 90%: ?

90%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	54.148.239.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.239.148.54

Whois 35.239.148.54

IP Abuse Reports for 35.239.148.54:

This IP address has been reported a total of 20 times from 15 distinct sources. 35.239.148.54 was first reported on August 30th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-31 10:00:53 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:00:47.078470 2026] [security2:error] [pid 27736:tid 27736] [client 35.239.148.54:60022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.scaleiq.group.smartstylehair.com"] [uri "/.git/config"] [unique_id "apVQz9xLMWcpYsfwQArnoQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-08-31 09:35:51 (2 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 09:24:03 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 05:23:58.166858 2026] [security2:error] [pid 16263:tid 16263] [client 35.239.148.54:33016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sbxyz.scottwithers.xyz"] [uri "/.git/config"] [unique_id "apVILm9ouX8d44eu5VTZiQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 08:35:14 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:35:07.430942 2026] [security2:error] [pid 29507:tid 29507] [client 35.239.148.54:57012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sbip.loneoakhoney.com"] [uri "/.git/config"] [unique_id "apU8u4TYNTSEgaYNJD35BAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-08-31 08:33:31 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 mnsf	2026-08-31 08:05:14 (3 hours ago)	Scanning/Probing (14)	Brute-Force Web App Attack
🇦🇺 Terrier	2026-08-31 08:00:01 (3 hours ago)	Blocked for HTTP vulnerability scanning (excessive 40x)	Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 07:03:59 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:03:55.133458 2026] [security2:error] [pid 13909:tid 13909] [client 35.239.148.54:37340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sayhellotometamodernism.com.demberdatabase.com"] [uri "/.git/config"] [unique_id "apUnWyUgFsBI8PUEkjq0pAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-08-31 05:55:19 (6 hours ago)	20 attempts against mh-misbehave-ban on burne	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 05:23:09 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:23:02.059345 2026] [security2:error] [pid 12674:tid 12674] [client 35.239.148.54:34072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.savingspools.savingshvac.com"] [uri "/.git/config"] [unique_id "apUPtr8RaSPebVgvvXWZfgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-31 05:13:39 (6 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-31 04:51:24 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-31 04:44:30 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.239.148.54 (54.148.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 00:44:22.627152 2026] [security2:error] [pid 12175:tid 12201] [client 35.239.148.54:59766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.savemyprom.conceptsinammunition.com"] [uri "/.git/config"] [unique_id "apUGpqbzrRewNzg13qGjyQAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-30 22:01:26 (13 hours ago)	Auto-ban: >3000 req/min op 2026-08-30	Web App Attack SSH Hacking
🇳🇱 ConsulHosting	2026-08-30 10:39:01 (1 day ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 212.87.218.114

🇰🇷 211.106.133.202

🇺🇸 195.184.76.158

🇧🇷 187.107.225.47

🇵🇾 186.33.35.71

🇬🇧 118.193.64.186

🇷🇺 80.68.4.83

🇩🇪 69.5.169.53

🇭🇰 42.200.66.116

🇨🇦 20.220.211.172

🇺🇸 20.83.58.87

🇬🇧 2.57.17.95

🇧🇷 2400:cb00:488:1000:c6a1:436b:dc56:b682

🇨🇳 223.104.204.175

🇺🇸 195.184.76.138

🇲🇽 158.23.147.79

🇵🇰 111.92.157.226

🇺🇸 107.150.97.10

🇺🇸 66.132.224.26

🇸🇬 45.82.78.108