JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.247.248.246

35.247.248.246 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	246.248.247.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.247.248.246

Whois 35.247.248.246

IP Abuse Reports for 35.247.248.246:

This IP address has been reported a total of 32 times from 22 distinct sources. 35.247.248.246 was first reported on June 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-15 21:59:46 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14. show less	Web App Attack SSH Hacking
Anonymous	2026-06-15 02:35:08 (2 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇸🇬 securejdprop	2026-06-15 00:25:15 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config. WAF block: crowdsecurit ... show more This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config. WAF block: crowdsecurity/vpatch-git-config from 35.247.248.246 (172.22.0.5) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-15 00:19:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.247.248.246 (246.248.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.248.246 (246.248.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:19:29.909943 2026] [security2:error] [pid 26872:tid 26872] [client 35.247.248.246:52076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.songforana.michaelsabbey.org"] [uri "/app/.git/config"] [unique_id "ai9FEQRYS16YSFg3uQFDXQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-06-15 00:08:11 (2 days ago)	http-sensitive-files - IP: 35.247.248.246 - time="2026-06-15T02:08:10+02:00" level=info msg="(555f6 ... show more http-sensitive-files - IP: 35.247.248.246 - time="2026-06-15T02:08:10+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 35.247.248.246 (BR/396982) : 4h ban on Ip 35.247.248.246" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 23:14:40 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.247.248.246 (246.248.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.248.246 (246.248.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:14:36.036352 2026] [security2:error] [pid 25929:tid 26047] [client 35.247.248.246:49200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nomadic-welshman.adetnw.com"] [uri "/blog/.git/config"] [unique_id "ai813H5NCY0QrsWvD4A6UQAAAkg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-06-14 23:06:04 (2 days ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
Anonymous	2026-06-14 23:06:04 (2 days ago)	Trying to access config files	Web App Attack
🇮🇹 zenmorro	2026-06-14 22:52:46 (2 days ago)	Honeypot hit (homeassistant:8123) — scanner-path: /.git/config. Automated report from honeypot infra ... show more Honeypot hit (homeassistant:8123) — scanner-path: /.git/config. Automated report from honeypot infrastructure show less	Port Scan Web App Attack
🇳🇿 Antinson	2026-06-14 22:45:10 (2 days ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-14 22:36:09 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.247.248.246 (246.248.247.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.247.248.246 (246.248.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:36:01.671693 2026] [security2:error] [pid 15098:tid 15098] [client 35.247.248.246:51414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "franklincountyquilters.org"] [uri "/src/.git/config"] [unique_id "ai8s0ZufB3AxNzjs6oVU5AAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-14 22:02:08 (2 days ago)	Auto-ban: >3000 req/min op 2026-06-14	Web App Attack SSH Hacking
🇳🇱 ipoac.nl	2026-06-14 21:56:28 (2 days ago)	-:443 35.247.248.246 - - [14/Jun/2026:23:56:27 +0200] - "GET /project/.git/config HTTP/1.1" 404 6378 ... show more -:443 35.247.248.246 - - [14/Jun/2026:23:56:27 +0200] - "GET /project/.git/config HTTP/1.1" 404 6378 "-" "Mozilla/5.0 (Linux; U; Android 7.0; en-US; PRA-LX1 Build/HUAWEIPRA-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.13.0.1207 Mobile Safari/537.36" show less	Bad Web Bot
Anonymous	2026-06-14 21:05:58 (2 days ago)	PSCSERV WPSCAN 35.247.248.246	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-06-14 21:00:33 (2 days ago)	20 attempts against mh_ha-misbehave-ban on ec102967	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.122.91.115

🇵🇹 188.82.92.61

🇫🇷 91.231.89.66

🇺🇸 91.230.168.153

🇳🇱 45.156.87.93

🇬🇧 217.146.80.98

🇩🇪 193.27.50.24

🇸🇾 188.160.14.159

🇹🇷 159.146.57.253

🇫🇷 147.135.252.145

🇮🇩 116.68.162.117

🇺🇸 104.236.118.31

🇧🇪 104.199.76.230

🇺🇸 91.230.168.55

🇲🇾 49.125.201.69

🇳🇱 45.148.10.157

🇬🇧 2a06:4880:6000::77

🇮🇩 222.124.158.12

🇰🇷 218.153.104.32

🇨🇳 202.99.211.194