JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.247.207.212

35.247.207.212 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	212.207.247.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.247.207.212

Whois 35.247.207.212

IP Abuse Reports for 35.247.207.212:

This IP address has been reported a total of 37 times from 25 distinct sources. 35.247.207.212 was first reported on August 30th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Webhoster	2026-09-01 09:09:18 (1 day ago)	{"ClientAddr":"172.69.138.42:10110","ClientHost":"35.247.207.212","ClientPort":"10110","ClientUserna ... show more {"ClientAddr":"172.69.138.42:10110","ClientHost":"35.247.207.212","ClientPort":"10110","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":2321127,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":2321127,"RequestAddr":"www.timvdberg.dev","RequestContentSize":0,"RequestCount":279244,"RequestHost":"www.timvdberg.dev","RequestMethod":"GET","RequestPath":"/.git/config","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"https-1-omari8kj3ono91z1qv5lbj10-coraza-www@docker","StartLocal":"2026-09-01T09:09:17.963318705Z","StartUTC":"2026-09-01T09:09:17.963318705Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","request_Cf-Connecting-Ip":"35.247.207.212","request_X-Forwarded-For":"35.247.207.212","request_X-Real-Ip":"172.69.138.42","time":"2026-09-01T09:09:17Z"} {"ClientAddr":"172.69.138.42:10110","ClientHost":"35.247.207.212","ClientPort": ... show less	Port Scan Hacking Bad Web Bot Web App Attack
Anonymous	2026-09-01 07:55:23 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-09-01 07:41:19 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 35.247.207.212 (BR/Brazil/212.207.247.3 ... show more (mod_security) mod_security triggered on hostname [redacted] 35.247.207.212 (BR/Brazil/212.207.247.35.bc.googleusercontent.com) show less	SQL Injection
🇳🇿 Antinson	2026-09-01 04:22:00 (1 day ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇸🇪 vaia.cloud	2026-09-01 01:25:02 (1 day ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
Anonymous	2026-09-01 01:07:05 (1 day ago)	Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-09-01 00:30:05.	Web App Attack
🇩🇪 BlueWire Hosting	2026-09-01 00:52:04 (1 day ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇩🇪 hidemail.app	2026-08-31 14:36:57 (1 day ago)	Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto ... show more Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban. show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-31 14:14:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:14:35.780570 2026] [security2:error] [pid 20299:tid 20299] [client 35.247.207.212:51050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.toomuchcaffeine.theillustrator.net"] [uri "/.git/config"] [unique_id "apWMSxGxmJiJPKiCg17-EAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-31 14:09:34 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 thetomtaylor.co.uk	2026-08-31 13:08:01 (1 day ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 11:33:09 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:33:02.026425 2026] [security2:error] [pid 29734:tid 29734] [client 35.247.207.212:53110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tomweston.net.marxistphilosophy.org"] [uri "/.git/config"] [unique_id "apVmbq0nTNzPA0Ii7FU4wgAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 11:03:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:03:37.840810 2026] [security2:error] [pid 32444:tid 32444] [client 35.247.207.212:45824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tomorrowsdust.net.greighhouse.com"] [uri "/.git/config"] [unique_id "apVfiXbNM1qr3rBHh342ewAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 10:33:52 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:33:49.025648 2026] [security2:error] [pid 29860:tid 29860] [client 35.247.207.212:57094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tommckee.tunabay.com"] [uri "/.git/config"] [unique_id "apVYjZIGYIudn-MfjxN3xQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 10:15:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.207.212 (212.207.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:15:41.511747 2026] [security2:error] [pid 3823984:tid 3824004] [client 35.247.207.212:44496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tomi-thai.com.plumeraproductions.com"] [uri "/.git/config"] [unique_id "apVUTapujVeVbOa8n5KUDwAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4884:5000::61

🇬🇧 193.163.125.28

🇮🇳 186.242.162.94

🇳🇱 159.223.217.240

🇪🇬 156.215.58.55

🇮🇩 114.79.6.16

🇮🇩 114.10.39.69

🇱🇰 112.134.144.234

🇵🇰 111.92.155.199

🇳🇱 94.154.43.158

🇧🇬 91.191.209.98

🇸🇬 47.79.205.242

🇺🇦 46.201.18.85

🇹🇿 41.59.170.50

🇨🇳 39.88.3.202

🇹🇼 35.229.160.192

🇬🇧 31.14.254.107

🇺🇸 20.46.234.188

🇬🇧 5.226.140.98

🇺🇸 209.141.34.121