JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.252.248.221

35.252.248.221 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	221.248.252.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.252.248.221

Whois 35.252.248.221

IP Abuse Reports for 35.252.248.221:

This IP address has been reported a total of 48 times from 40 distinct sources. 35.252.248.221 was first reported on July 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-22 10:06:34 (1 day ago)	Trying to access config files	Web App Attack
🇧🇪 sid3windr	2026-07-22 03:30:13 (1 day ago)	GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-21 21:59:58 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-20. show less	Web App Attack SSH Hacking
Anonymous	2026-07-20 23:15:42 (2 days ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-20 21:59:07 (2 days ago)	Auto-ban: >3000 req/min op 2026-07-20	Web App Attack SSH Hacking
Anonymous	2026-07-20 20:17:07 (2 days ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
Anonymous	2026-07-20 19:03:28 (2 days ago)	Web application attack detected.	Web App Attack
Anonymous	2026-07-20 14:00:04 (3 days ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇺🇸 Rip	2026-07-20 13:58:07 (3 days ago)	Restricted File Access Attempts	Port Scan Web App Attack
Anonymous	2026-07-20 13:56:00 (3 days ago)	35.252.248.221 - - [20/Jul/2026:15:55:58 +0200] "GET /.git/config HTTP/1.1" 402 5869 "-" "Mozilla/5. ... show more 35.252.248.221 - - [20/Jul/2026:15:55:58 +0200] "GET /.git/config HTTP/1.1" 402 5869 "-" "Mozilla/5.0 (X11; Linux x86_64)" ... show less	Web App Attack
🇮🇹 CoreTech srl	2026-07-20 13:48:57 (3 days ago)	cloudlinux2 fail2ban: 2026-07-20 15:43:50,615 fail2ban.filter [1927]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-20 15:43:50,615 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 35.252.248.221 - 2026-07-20 15:43:50cloudlinux2 fail2ban: 2026-07-20 15:44:28,087 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 34.178.163.246 - 2026-07-20 15:44:27cloudlinux2 fail2ban: 2026-07-20 15:44:25,369 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 34.178.163.246 - 2026-07-20 15:44:25cloudlinux2 fail2ban: 2026-07-20 15:44:49,033 fail2ban.actions [1927]: NOTICE [plesk-modsecurity] Unban 35.221.188.122cloudlinux2 fail2ban: 2026-07-20 15:45:13,818 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 216.24.212.34 - 2026-07-20 15:45:12cloudlinux2 fail2ban: 2026-07-20 15:46:07,337 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 42.200.84.61 - 2026-07-20 15:46:06cloudlinux2 fail2ban: 2026-07-20 15:47:12,484 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 18.206.200.240 - 2026-07-20 15:47:12cloudlinux2 fail2 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 13:48:37 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 35.252.248.221 (221.248.252.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.252.248.221 (221.248.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 09:48:30.554342 2026] [security2:error] [pid 4160693:tid 4160693] [client 35.252.248.221:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sahinozalit.com"] [uri "/.git/config"] [unique_id "al4nLmGrF09yYdqs4iLJJwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-07-20 13:46:42 (3 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (X11; Linux x86_64) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇮 as211431.net	2026-07-20 13:39:22 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (X11; Linux x86_64) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-20 13:35:04 (3 days ago)	Automatic report - Vulnerability scan /.git/config	Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.174

🇬🇧 185.247.137.134

🇺🇸 66.249.74.10

🇧🇬 185.148.144.64

🇺🇸 162.216.149.237

🇵🇰 154.208.43.221

🇺🇸 147.185.132.223

🇺🇸 103.143.231.24

🇹🇷 88.255.189.50

🇺🇸 65.87.7.173

🇺🇸 52.242.193.144

🇹🇭 223.204.242.57

🇨🇴 186.118.220.90

🇮🇶 185.158.22.150

🇰🇷 175.119.225.92

🇧🇷 170.231.252.92

🇺🇸 107.174.137.235

🇿🇦 102.37.51.24

🇺🇸 68.207.224.247

🇫🇷 62.210.209.229