JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 8.228.252.149

8.228.252.149 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 53%: ?

53%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	149.252.228.8.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 8.228.252.149

Whois 8.228.252.149

IP Abuse Reports for 8.228.252.149:

This IP address has been reported a total of 9 times from 8 distinct sources. 8.228.252.149 was first reported on June 25th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-27 22:03:11 (20 hours ago)	Auto-ban: 241 malicious requests on 2026-06-26 (e.g., env/backup probes, brute-force, or error burst ... show more Auto-ban: 241 malicious requests on 2026-06-26 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇺🇸 mnsf	2026-06-26 03:06:20 (2 days ago)	Scanning/Probing (52) Request Overload (176)	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-06-26 02:14:23 (2 days ago)	Aggressive web search of vulnerable pages: /secrets/aws.json /secrets/credentials.json /secrets/gcp. ... show more Aggressive web search of vulnerable pages: /secrets/aws.json /secrets/credentials.json /secrets/gcp.json /secrets/azure.json /phpinfo.php ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 01:41:06 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 8.228.252.149 (149.252.228.8.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 8.228.252.149 (149.252.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:40:59.538958 2026] [security2:error] [pid 3494:tid 3494] [client 8.228.252.149:54734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.studio716.powerastronomy.com"] [uri "/config/config.yml"] [unique_id "aj3Yq0zPL3jdUhUjsTNcqAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 01:05:00 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 8.228.252.149 (149.252.228.8.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 8.228.252.149 (149.252.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:04:54.293941 2026] [security2:error] [pid 3403:tid 3403] [client 8.228.252.149:55086] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.lamineparke.chevronparkett.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lamineparke.chevronparkett.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aj3QNiEUJAF_HKbJpoXhBgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-06-25 23:37:25 (2 days ago)	{"level":"info","ts":1782430644.1689973,"logger":"http.log.access.log0","msg":"handled request","req ... show more {"level":"info","ts":1782430644.1689973,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"8.228.252.149","remote_port":"60258","client_ip":"8.228.252.149","proto":"HTTP/1.1","method":"GET","host":"fha5.status.updown.io","uri":"/actuator/trace","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.90 Safari/537.36 Vivaldi/1.4.589.11"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"fha5.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000761866,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1782430644.1699224,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"8.228.252.149","remote_port":"60228","client_ip":"8.228.252.149","proto":"HTTP/1.1" ... show less	DDoS Attack Web App Attack
🇬🇧 Aetherweb Ark	2026-06-25 23:12:02 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 8.228.252.149 (US/United States/149.252.228.8.b ... show more (mod_security) mod_security (id:949110) triggered by 8.228.252.149 (US/United States/149.252.228.8.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇧🇾 lns.bz	2026-06-25 20:35:56 (2 days ago)	.env scanning [BY]	Web App Attack
🇺🇸 revslowmo	2026-06-25 14:13:35 (3 days ago)	Bot attempt ssh bruteforce	Brute-Force SSH

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇱 203.159.81.93

🇺🇸 52.20.198.190

🇸🇬 212.73.148.41

🇦🇪 198.38.94.18

🇲🇼 102.209.62.169

🇨🇭 83.78.17.114

🇬🇧 82.40.85.109

🇫🇮 77.105.130.18

🇮🇶 65.20.143.45

🇻🇳 27.79.44.87

🇺🇸 205.210.31.3

🇲🇽 186.96.158.180

🇩🇪 139.59.208.225

🇵🇭 124.6.178.98

🇨🇳 115.190.162.240

🇪🇸 88.11.60.128

🇨🇳 59.37.13.66

🇳🇱 45.153.34.161

🇬🇧 35.203.210.149

🇯🇵 2a09:bac1:3b40:1020::16:21a