JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.194.225.16

35.194.225.16 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	16.225.194.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇹🇼 Taiwan
City	Taipei, Taiwan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.194.225.16

Whois 35.194.225.16

IP Abuse Reports for 35.194.225.16:

This IP address has been reported a total of 34 times from 33 distinct sources. 35.194.225.16 was first reported on August 28th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-01 13:55:51 (2 hours ago)	35.194.225.16 detected and blocked by apache-modsecurity after 1 try	Brute-Force
🇦🇺 AWW-Admin	2026-09-01 12:41:19 (3 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 35.194.225.16 (TW/Taiwan/16.225.194.35. ... show more (mod_security) mod_security triggered on hostname [redacted] 35.194.225.16 (TW/Taiwan/16.225.194.35.bc.googleusercontent.com) show less	SQL Injection
🇦🇺 Starburst SysOp Team	2026-09-01 12:36:47 (4 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-syd2-4)	Hacking Bad Web Bot
🇮🇹 CoreTech srl	2026-09-01 08:12:54 (8 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇺🇸 jormaster3k	2026-08-31 23:48:29 (16 hours ago)	Attack against Apache (too many 404s)	Web App Attack
🇯🇵 VXG-NET	2026-08-31 22:36:57 (18 hours ago)	port=80, indicator_type=info-leak	Hacking
Anonymous	2026-08-31 21:35:05 (19 hours ago)	LH-Watcher: FAKE_ID [Fake GPTBot]	Bad Web Bot
🇦🇺 aranguren.org	2026-08-31 20:45:30 (19 hours ago)	35.194.225.16 - - [01/Sep/2026:06:45:28 +1000] "GET /__aws_leak_probe_682c1905__ HTTP/1.1" 404 1178 ... show more 35.194.225.16 - - [01/Sep/2026:06:45:28 +1000] "GET /__aws_leak_probe_682c1905__ HTTP/1.1" 404 1178 "https://203.132.94.196:443/__aws_leak_probe_682c1905__" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 35.194.225.16 - - [01/Sep/2026:06:45:28 +1000] "GET /static../.env HTTP/1.1" 404 1150 "https://203.132.94.196:443/static../.env" "Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)" 35.194.225.16 - - [01/Sep/2026:06:45:29 +1000] "GET /media../.env HTTP/1.1" 404 1148 "https://203.132.94.196:443/media../.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot" 35.194.225.16 - - [01/Sep/2026:06:45:29 +1000] "GET /@vite/env HTTP/1.1" 404 1142 "https://203.132.94.196:443/@vite/env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 35.194.225.16 - - [ ... show less	Bad Web Bot
🇹🇼 ashiyasayo	2026-08-31 10:23:00 (1 day ago)	Detected multiple web vulnerability exploit attempts, aggressive probing and scanning, resource enum ... show more Detected multiple web vulnerability exploit attempts, aggressive probing and scanning, resource enumeration. show less	Web App Attack
🇫🇮 diego021	2026-08-31 08:28:38 (1 day ago)	35.194.225.16 135.181.251.148 - [31/Aug/2026:03:28:35 -0500] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5 ... show more 35.194.225.16 135.181.251.148 - [31/Aug/2026:03:28:35 -0500] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 35.194.225.16 135.181.251.148 - [31/Aug/2026:03:28:36 -0500] "GET /__aws_leak_probe_721ff3ca__ HTTP/1.1" 404 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 35.194.225.16 135.181.251.148 - [31/Aug/2026:03:28:36 -0500] "GET /static../.env HTTP/1.1" 404 158 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 35.194.225.16 135.181.251.148 - [31/Aug/2026:03:28:36 -0500] "GET /@fs/proc/self/environ HTTP/1.1" 404 158 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" ... show less	Web App Attack
🇳🇿 Antinson	2026-08-31 06:49:50 (1 day ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-08-31 05:47:08 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 35.194.225.16 (TW/Taiwan/16.225.194.35. ... show more (mod_security) mod_security triggered on hostname [redacted] 35.194.225.16 (TW/Taiwan/16.225.194.35.bc.googleusercontent.com) show less	SQL Injection
🇫🇷 EDSL	2026-08-31 05:39:32 (1 day ago)	[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 80)	Web App Attack Hacking Port Scan
🇪🇸 masterguru	2026-08-30 10:47:33 (2 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "amazonbot" at REQUEST_HEADERS:User-Agent. (1100000- ... show more BAD BOT - Detected and Blocked.. Matched phrase "amazonbot" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-30 10:13:34 (2 days ago)	(mod_security) mod_security (id:211190) triggered by 35.194.225.16 (16.225.194.35.bc.googleuserconte ... show more (mod_security) mod_security (id:211190) triggered by 35.194.225.16 (16.225.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 06:13:26.311979 2026] [security2:error] [pid 1727:tid 1727] [client 35.194.225.16:10150] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|192.64.150.34:443\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /download?file=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.34"] [uri "/download"] [unique_id "apQCRhYKNb7jpL38kuDO5wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇺🇸 162.216.149.176

🇫🇷 91.196.152.25

🇦🇷 45.171.132.162

🇸🇪 45.84.107.200

🇨🇳 42.51.42.209

🇩🇪 193.124.20.237

🇺🇸 172.174.188.183

🇩🇪 159.89.7.194

🇺🇸 108.167.161.80

🇿🇦 102.23.88.162

🇩🇪 84.187.97.45

🇷🇺 80.234.72.197

🇧🇬 79.124.59.78

🇫🇷 51.178.122.178

🇻🇪 201.211.236.242

🇩🇪 193.124.20.248

🇫🇷 172.71.119.105

🇺🇸 147.185.132.35

🇮🇳 128.185.12.179