JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.252.222.136

35.252.222.136 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 67%: ?

67%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	136.222.252.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.252.222.136

Whois 35.252.222.136

IP Abuse Reports for 35.252.222.136:

This IP address has been reported a total of 13 times from 11 distinct sources. 35.252.222.136 was first reported on July 19th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2026-07-20 04:32:29 (2 days ago)	Many_bad_calls	Web App Attack
🇧🇪 taivas.nl	2026-07-19 11:32:12 (3 days ago)	Bad_requests	Bad Web Bot
🇷🇺 DZBOT	2026-07-19 11:04:32 (3 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇦🇺 electronico	2026-07-19 10:59:29 (3 days ago)	35.252.222.136 - - [19/Jul/2026:21:59:28 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2111 "-" "Mozill ... show more 35.252.222.136 - - [19/Jul/2026:21:59:28 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2111 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 10:57:47 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 35.252.222.136 (136.222.252.35.bc.googleusercon ... show more (mod_security) mod_security (id:225170) triggered by 35.252.222.136 (136.222.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 06:57:39.799779 2026] [security2:error] [pid 3604806:tid 3604806] [client 35.252.222.136:57537] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.comobarbershop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.comobarbershop.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alytozxxA4NWAocaM1TouQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-19 10:52:44 (3 days ago)	CrowdSec: crowdsecurity/http-probing \| req: /wp-includes/id3/license.txt/feed/ \| 10 distinct paths \| ... show more CrowdSec: crowdsecurity/http-probing \| req: /wp-includes/id3/license.txt/feed/ \| 10 distinct paths \| UA: - show less	Port Scan Web App Attack
🇷🇴 SpamStopper	2026-07-19 10:45:41 (3 days ago)	Fail2Ban - WordPress\(Anomis\) Looking for CMS/PHP/SQL vulnerabilities and hacked web hosts servers	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-07-19 10:41:24 (3 days ago)	35.252.222.136 - - [19/Jul/2026:06:41:20 -0400] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1. ... show more 35.252.222.136 - - [19/Jul/2026:06:41:20 -0400] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 34597 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.252.222.136 - - [19/Jul/2026:06:41:20 -0400] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 34548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.252.222.136 - - [19/Jul/2026:06:41:21 -0400] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 34558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.252.222.136 - - [19/Jul/2026:06:41:22 -0400] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 34558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.252.222.136 - - [19/Jul/2026:06:41:23 -0400] "GET //2021/wp-includes/wlwmanife ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-19 10:37:15 (3 days ago)	(xmlrpc) Failed xmlrpc access from 35.252.222.136 (US/United States/136.222.252.35.bc.googleusercont ... show more (xmlrpc) Failed xmlrpc access from 35.252.222.136 (US/United States/136.222.252.35.bc.googleusercontent.com): 5 in the last 3600 secs (0-122) show less	Hacking
🇮🇹 VHosting	2026-07-19 10:35:04 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 netclix.gr	2026-07-19 10:25:20 (3 days ago)	(wordpress) Failed wordpress login from 35.252.222.136 (US/United States/136.222.252.35.bc.googleuse ... show more (wordpress) Failed wordpress login from 35.252.222.136 (US/United States/136.222.252.35.bc.googleusercontent.com): (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-19 10:24:29 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 35.252.222.136 (136.222.252.35.bc.googleusercon ... show more (mod_security) mod_security (id:225170) triggered by 35.252.222.136 (136.222.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 06:24:23.358094 2026] [security2:error] [pid 1658:tid 1658] [client 35.252.222.136:64681] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cloudex.link\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cloudex.link"] [uri "/wp-json/wp/v2/users/"] [unique_id "alyl1wqYEi4PchlVBqj9TQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2026-07-19 01:09:40 (3 days ago)	GET //wp-includes/ID3/license.txt HTTP/1.1	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.4.141.198

🇺🇸 152.32.233.95

🇨🇦 149.56.147.188

🇮🇳 103.67.152.201

🇷🇴 92.118.39.214

🇳🇱 64.89.162.146

🇷🇴 2.57.122.168

🇺🇸 2607:f8b0:4004:c25::12c

🇺🇸 205.210.31.0

🇨🇴 186.117.144.127

🇩🇰 185.229.152.13

🇻🇳 171.244.37.103

🇨🇳 171.12.10.236

🇺🇸 165.227.121.87

🇺🇸 147.185.132.27

🇹🇼 101.13.5.195

🇷🇺 95.165.27.83

🇺🇸 95.164.158.238

🇺🇸 7.236.176.215

🇹🇼 211.20.14.156