JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.252.255.160

35.252.255.160 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	160.255.252.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.252.255.160

Whois 35.252.255.160

IP Abuse Reports for 35.252.255.160:

This IP address has been reported a total of 22 times from 20 distinct sources. 35.252.255.160 was first reported on October 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-10-15 13:44:25 (1 day ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-15 UTC.	Brute-Force
Anonymous	2026-10-15 07:35:21 (2 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇩🇪 ghostwarriors	2026-10-15 07:20:44 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-10-15 07:18:00 (2 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇳🇱 tmiland	2026-10-15 07:13:37 (2 days ago)	(wordpress_wlwmanifest) WordPress wlwmanifest.xml Attack 35.252.255.160 (US/United States/160.255.25 ... show more (wordpress_wlwmanifest) WordPress wlwmanifest.xml Attack 35.252.255.160 (US/United States/160.255.252.35.bc.googleusercontent.com): 3 in the last 3600 secs; IP: 35.252.255.160; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.252.255.160 - - [15/Oct/2026:09:13:32 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:09:13:33 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:09:13:33 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" show less	Brute-Force
🇺🇸 TPI-Abuse	2026-10-15 07:11:15 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 35.252.255.160 (160.255.252.35.bc.googleusercon ... show more (mod_security) mod_security (id:225170) triggered by 35.252.255.160 (160.255.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:11:11.079806 2026] [security2:error] [pid 27834:tid 27834] [client 35.252.255.160:58171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.abundancecompany.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.abundancecompany.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atB8jwexMbKrqciGEPQ0YAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-10-15 07:07:05 (2 days ago)	2026-10-15 @ 09:06:42 (CET) ~ Blocked for trying to access: /wp-includes/wlwmanifest.xml	Web App Attack
🇺🇸 Jason Howell	2026-10-15 07:05:18 (2 days ago)	35.252.255.160 - - [15/Oct/2026:02:05:16 -0500] "POST //xmlrpc.php HTTP/1.1" 200 641 "-" "Mozilla/5. ... show more 35.252.255.160 - - [15/Oct/2026:02:05:16 -0500] "POST //xmlrpc.php HTTP/1.1" 200 641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:02:05:16 -0500] "POST //xmlrpc.php HTTP/1.1" 200 4386 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:02:05:17 -0500] "POST //xmlrpc.php HTTP/1.1" 200 4384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:02:05:17 -0500] "POST //xmlrpc.php HTTP/1.1" 200 4385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:02:05:17 -0500] "POST //xmlrpc.php HTTP/1.1" 200 4385 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck ... show less	Web App Attack
🇳🇱 Roderic	2026-10-15 07:00:20 (2 days ago)	Insights: web vulnerability probing, 80 requests on 4 sites, e.g. /wp-includes/wlwmanifest.xml, //wp ... show more Insights: web vulnerability probing, 80 requests on 4 sites, e.g. /wp-includes/wlwmanifest.xml, //wp-includes/wlwmanifest.xml (as: Browser via Google Cloud) show less	Web App Attack
🇩🇪 Kreapptivo	2026-10-15 06:57:08 (2 days ago)	[15/Oct/2026:08:57:07 +0200] Web-Request: "GET //wp-includes/wlwmanifest.xml", User-Agent: "Mozilla/ ... show more [15/Oct/2026:08:57:07 +0200] Web-Request: "GET //wp-includes/wlwmanifest.xml", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" show less	Bad Web Bot Web App Attack
🇨🇭 zynex	2026-10-15 06:57:01 (2 days ago)	URL Probing: /2019/wp-includes/wlwmanifest.xml	Web App Attack
🇺🇸 agenciahypelab.com.br	2026-10-15 06:50:53 (2 days ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
Anonymous	2026-10-15 06:50:27 (2 days ago)	Web scanner: GET //wp-includes/wlwmanifest.xml	Web App Attack Hacking
🇺🇸 IndigoRidge	2026-10-15 06:46:02 (2 days ago)	35.252.255.160 - - [15/Oct/2026:02:46:00 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 569 ... show more 35.252.255.160 - - [15/Oct/2026:02:46:00 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 5693 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:02:46:00 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 6398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:02:46:00 -0400] "GET //?author=1 HTTP/1.1" 301 5599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:02:46:01 -0400] "GET //?author=2 HTTP/1.1" 301 5599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 35.252.255.160 - - [15/Oct/2026:02:46:01 -0400] "GET //?author=3 HTTP/1.1" 301 5707 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ... show less	Web App Attack
🇩🇪 Vegascosmetics	2026-10-15 06:34:21 (2 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 107>=65, Abuse 44, NonEU) show less	Hacking Exploited Host Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 145.255.10.59

🇵🇰 223.123.42.238

192.168.4.80

🇺🇸 147.185.132.208

🇺🇸 103.143.239.201

🇺🇸 66.132.186.141

🇯🇵 34.146.49.239

🇺🇸 172.236.112.131

🇩🇪 148.153.50.179

🇷🇺 109.173.107.163

🇬🇧 77.67.26.136

🇸🇬 47.128.49.1

🇹🇼 35.185.140.246

🇭🇰 8.210.28.151

🇸🇬 138.2.92.229

🇲🇴 125.31.2.160

🇰🇷 121.142.87.218

🇷🇺 94.243.10.202

🇺🇸 94.228.20.19

🇨🇦 85.217.149.43