JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.252.238.147

35.252.238.147 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 56%: ?

56%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	147.238.252.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.252.238.147

Whois 35.252.238.147

IP Abuse Reports for 35.252.238.147:

This IP address has been reported a total of 15 times from 13 distinct sources. 35.252.238.147 was first reported on May 19th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-05-23 22:02:31 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-22. show less	Web App Attack SSH Hacking
🇦🇹 nomzamo	2026-05-22 16:35:31 (1 week ago)	Fail2Ban reported: nginx-credential-scan	Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-05-22 12:42:02 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇷🇺 DZBOT	2026-05-22 07:15:13 (2 weeks ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 masterguru	2026-05-22 00:45:38 (2 weeks ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.252.238.147 (US/United States/147. ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.252.238.147 (US/United States/147.238.252.35.bc.googleusercontent.com): 2 in the last 3600 secs (0-193) show less	Hacking
🇫🇮 kumiko	2026-05-20 10:38:27 (2 weeks ago)	[2026-05-20 13:38:27] Probing for dotfiles "GET /.git/config HTTP/1.1" 403	Bad Web Bot Web App Attack
🇸🇰 HILKA	2026-05-20 10:30:20 (2 weeks ago)	Automatic report from HLK firewall log.	Port Scan Hacking Brute-Force
🇵🇱 sefinek.net	2026-05-20 09:22:11 (2 weeks ago)	Honeypot hit: Unauthorized traffic (239 bytes of payload); 9090 [2] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (239 bytes of payload); 9090 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-05-20 08:59:56 (2 weeks ago)	35.252.238.147 - - [20/May/2026:01:02:45 +0000] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03\x82\xC ... show more 35.252.238.147 - - [20/May/2026:01:02:45 +0000] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03\x82\xC8a\xA41\xF9\xA9c\x19\x8E\x92z\x08E\xDF\x98\x07O\x187\x9E`\xCC\|\xAD\xC1\xD9g\xA803\xB7 \xCF.\xFF\xBE\xE7\x09\x11\|Es\x1E\x92\xEE\xD5$\xB9\x85\x17C\xAC^\x80\xACb\xB2I\x9E+\xA3\x8D\xE8K\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-" 35.252.238.147 - - [20/May/2026:08:59:55 +0000] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03J\xAF:\xF7av\x87\xAB\x18?0\x83\x9A\xDFz\xF2\xB4\xB2\xEA\x1B\xE9\x94\xC7\xDB,Y\xA2\x7F\xC8\x9F\xC6\xE8 A\xD08d3\xC1\xDF\xFE\xC1s\xB5\xB0\xAF\xB6\x9AJZ8U\xB0\xC4\xCCb\x01\x13q\x98\xF0\xCE8\x91\xFC\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-" ... show less	Port Scan Brute-Force
🇬🇧 PeravixGroup	2026-05-20 08:07:51 (2 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇵🇱 sefinek.net	2026-05-20 00:33:36 (2 weeks ago)	Honeypot hit: Unauthorized traffic (239 bytes of payload); 6443 [2] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (239 bytes of payload); 6443 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 nyt	2026-05-20 00:32:10 (2 weeks ago)	Empty UA + error, Sensitive File Probe	Web App Attack
🇬🇧 PeravixGroup	2026-05-19 23:00:28 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 crooze.net	2026-05-19 22:59:52 (2 weeks ago)	35.252.238.147 - - [19/May/2026:22:59:51 +0000] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03\x5C\x0 ... show more 35.252.238.147 - - [19/May/2026:22:59:51 +0000] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03\x5C\x05iu\xDApp\x1F\x86f\x90\x09\xEBt\xA5\xBC\x18l\xA3S!\xB3\xB1\xB4\xA9\x88<O\x12b\xE6U \xA6\x80(\x15\xC6\xCB\xE8\xE6\x91\x1B\xFB\x1A\x8D\xC4\xEE~\x8EV\x03\x91\x8C\x0C\x14\xD7v\x818d!a\xFB\x8E\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" ... show less	Hacking Web App Attack
🇺🇸 Starburst SysOp Team	2026-05-19 22:38:45 (2 weeks ago)	(mod_security-custom) mod_security (id:210492) triggered by 35.252.238.147 (US/United States/Oregon/ ... show more (mod_security-custom) mod_security (id:210492) triggered by 35.252.238.147 (US/United States/Oregon/The Dalles/147.238.252.35.bc.googleusercontent.com/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 3600 secs (0-srv1) show less	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:c84::1c5

🇺🇸 216.180.246.95

🇩🇪 213.209.159.56

🇮🇱 212.199.105.109

🇨🇳 180.76.250.159

🇭🇳 170.83.116.69

🇺🇸 162.216.150.60

🇺🇸 162.216.149.136

🇯🇵 153.127.9.27

🇭🇰 101.32.1.25

🇷🇴 92.118.39.236

🇷🇴 80.94.92.182

🇧🇪 34.62.142.105

🇺🇸 3.143.250.39

🇺🇸 3.134.90.118

🇺🇸 2001:470:1:fb5::16d

🇨🇳 221.14.34.30

🇺🇸 209.141.46.157

🇳🇱 193.176.31.235

🇧🇷 187.7.166.150