JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

35.247.137.42

Recent Activity

Abuse Confidence Score

100% Critical

27 reports

22 reporters · latest 1 day ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 42.137.247.35.bc.googleusercontent.com
Domain Name: google.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

27 from 22 distinct reporters

First reported

November 9th 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇬🇧 United Kingdom of Great Britain and Northern Ireland 11 🇩🇪 Germany 4 🇳🇱 Netherlands 4

Most common categories Web App Attack 22 Bad Web Bot 9 Hacking 6 Brute-Force 5 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-11-10 06:14:42 UTC · (1 day ago)	126 attacks on env grabbing URLs, config grabbing URLs (type 2), PHP URLs, env grabbing URLs (type 2): GET /private/.env HTTP/1.1 GET /auth.json HTTP/1.1 GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1 GET /userfi ... show more 126 attacks on env grabbing URLs, config grabbing URLs (type 2), PHP URLs, env grabbing URLs (type 2): GET /private/.env HTTP/1.1 GET /auth.json HTTP/1.1 GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1 GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 cybersteve99	2026-11-09 18:59:42 UTC · (2 days ago)	Too many 4xx Requests -	Brute-Force Web App Attack
🇬🇧 SwinT	2026-11-09 18:00:06 UTC · (2 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 yvoictra	2026-11-09 16:24:21 UTC · (2 days ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files	Web App Attack
🇳🇱 ams_sec_user	2026-11-09 15:05:27 UTC · (2 days ago)	Automated requests against a hosted website: 206 requests between 14:00 and 14:59 UTC; 94 probes for exposed secrets/config files (/userfiles, /userfiles/x, /cache/original/%2e%2e/.env). Reported automatically.	Hacking Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-11-09 14:47:36 UTC · (2 days ago)	[cb-11al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.247.137.42 - - [09/Nov/2026:15:47:19 +0100] "GET /swagger HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537. ... show more [cb-11al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.247.137.42 - - [09/Nov/2026:15:47:19 +0100] "GET /swagger HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 35.247.137.42 - - [09/Nov/2026:15:47:19 +0100] "GET /z9x8c7v6b5-debug-trigger-staging.zusterinhuis.es HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 35.247.137.42 - - [09/Nov/2026:15:47:19 +0100] "GET /ue06546djiewavhlj6hl HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 35.247.137.42 - - [09/Nov/2026:15:47:19 +0100] "GET /settings/security HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (X11; Linux x86 ... show less	Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-11-09 14:01:46 UTC · (2 days ago)	{"level":"info","ts":1794232905.7054486,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.247.137.42","remote_port":"38264","client_ip":"35.247.137.42","proto":"HTTP/2.0","method":"GET","host":"status.akmiller.co.uk", ... show more {"level":"info","ts":1794232905.7054486,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.247.137.42","remote_port":"38264","client_ip":"35.247.137.42","proto":"HTTP/2.0","method":"GET","host":"status.akmiller.co.uk","uri":"/key.json","headers":{"X-Real-Ip":["100.114.214.42"],"X-Nextjs-Data":["1"],"X-Client-Ip":["100.114.214.42"],"Cluster-Client-Ip":["100.114.214.42"],"X-Forwarded-For":["100.114.214.42"],"X-Proxyuser-Ip":["100.114.214.42"],"True-Client-Ip":["100.114.214.42"],"X-Remote-Addr":["100.114.214.42"],"User-Agent":["Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"X-Originating-Ip":["100.114.214.42"],"Accept":["/"],"Forwarded":["for=100.114.214.42"],"X-Remote-Ip":["100.114.214.42"],"X-Custom-Ip-Authorization":["100.114.214.42"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/m ... show less	DDoS Attack Web App Attack
🇬🇧 gigatech	2026-11-09 14:00:05 UTC · (2 days ago)	Webserver Probing	Web App Attack
🇪🇸 pipeline.es	2026-11-09 13:41:57 UTC · (2 days ago)	Web scanning / probing for vulnerable paths \| URL: /build/.env \| Evidence: intranet.zafirotours.es 35.247.137.42 - - [09/Nov/2026:14:41:03 +0100] \"GET /build/.env HTTP/1.1\" 404 208 \"-\" \"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://deve ... show more Web scanning / probing for vulnerable paths \| URL: /build/.env \| Evidence: intranet.zafirotours.es 35.247.137.42 - - [09/Nov/2026:14:41:03 +0100] \"GET /build/.env HTTP/1.1\" 404 208 \"-\" \"Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)\" GEOIP_COUNTRY_CODE=SG \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: SG show less	Port Scan Web App Attack
🇬🇧 MrTumnus	2026-11-09 13:13:03 UTC · (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
🇬🇧 cg-design.co.uk	2026-11-09 12:11:44 UTC · (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 35.247.137.42 (SG/Singapore/42.137.247.35.bc.googleusercontent.com)	SQL Injection
🇬🇧 Artelis	2026-11-09 11:13:34 UTC · (2 days ago)	35.247.137.42 - - [09/Nov/2026:11:13:31 +0000] "GET /robots.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 35.247.137.42 - - [09/Nov/2026:11:13:31 +0000] "GET /sitemap.xml HTTP/2.0" 404 146 "-" "Mozi ... show more 35.247.137.42 - - [09/Nov/2026:11:13:31 +0000] "GET /robots.txt HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 35.247.137.42 - - [09/Nov/2026:11:13:31 +0000] "GET /sitemap.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 35.247.137.42 - - [09/Nov/2026:11:13:32 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 35.247.137.42 - - [09/Nov/2026:11:13:32 +0000] "GET /syi83w0wa8fmipj8i6l4 HTTP/2.0" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 35.247.137.42 - - [09/Nov/2026:11:13:32 +0000] "GET /z9x8c7v6b5-debug-trigger-www.artelis.co.uk HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 35.247.137.42 - - [09/Nov/2026:11:13:32 +0000] "GET /t9ypnjxyqy2sqwt956mv HTTP/2 ... show less	Web App Attack
🇬🇧 poundawebsiteltd	2026-11-09 10:47:09 UTC · (2 days ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.247.137.42 (SG/Singapore/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 35.247.137.42 (SG/Singapore/42.137.247.35. ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.247.137.42 (SG/Singapore/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 35.247.137.42 (SG/Singapore/42.137.247.35.bc.googleusercontent.com): 20 in the last 3600 secs show less	Brute-Force Web App Attack
🇬🇧 Aetherweb Ark	2026-11-09 10:41:21 UTC · (2 days ago)	(mod_security) mod_security (id:949110) triggered by 35.247.137.42 (SG/Singapore/42.137.247.35.bc.googleusercontent.com): N in the last X secs	Web App Attack
🇪🇸 masterguru	2026-11-09 10:40:28 UTC · (2 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "OAI-SearchBot" at REQUEST_HEADERS:User-Agent. (1100000-122)	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇭 124.199.118.52

🇺🇸 34.230.205.18

🇺🇸 216.73.160.182

🇺🇸 216.73.160.23

🇩🇪 212.30.36.221

🇳🇱 204.76.203.4

🇬🇧 193.163.125.226

🇳🇱 185.223.235.9

🇧🇷 177.104.131.33

🇳🇱 176.65.132.23

🇺🇸 173.194.94.27

🇺🇸 147.185.132.103

🇺🇸 146.88.240.102

🇩🇪 144.31.74.153

🇩🇪 134.209.252.61

🇺🇸 134.33.65.102

🇳🇱 109.160.32.105

🇺🇸 104.200.69.7

🇺🇸 100.49.117.77

🇨🇦 85.217.149.73