JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

35.197.145.48

Activity Trending Down

Abuse Confidence Score

29% Elevated

18 reports

14 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 48.145.197.35.bc.googleusercontent.com
Domain Name: google.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

18 from 14 distinct reporters

First reported

September 20th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇫🇷 France 4 🇺🇸 United States of America 4 🇨🇿 Czechia 2

Most common categories Web App Attack 17 Brute-Force 7 Hacking 6 Bad Web Bot 5 SSH 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-30 21:59:30 UTC · (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-29.	Web App Attack SSH Hacking
🇫🇷 dynamix	2026-09-29 13:13:41 UTC · (1 month ago)	Automated web vulnerability and path enumeration scan with excessive 404 requests	Bad Web Bot Web App Attack
Anonymous	2026-09-29 12:19:03 UTC · (1 month ago)	http scanning for .env files ...	Hacking Web App Attack
🇫🇷 masterguru	2026-09-29 03:39:43 UTC · (1 month ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)	Hacking
Anonymous	2026-09-27 14:40:02 UTC · (1 month ago)	\| [Dangerous/Singapore] Aggressive IP 35.197.145.48 (~30 hits). Type: DoS Defender- Web server 400 error code	Web App Attack Hacking SQL Injection
Anonymous	2026-09-26 08:20:01 UTC · (1 month ago)	suspicious request in access.log	Web App Attack
🇫🇷 Cuteminded	2026-09-25 18:20:10 UTC · (1 month ago)	Blocked for malicious scraping activity	Web App Attack
🇩🇪 ghostwarriors	2026-09-25 16:20:04 UTC · (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-09-25 15:55:36 UTC · (1 month ago)	35.197.145.48 - - [25/Sep/2026:17:55:31 +0200] "GET /.env.remote HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.197.145.48 - - [25/Sep/2026:17:55:31 +0200] "GET /.env.b ... show more 35.197.145.48 - - [25/Sep/2026:17:55:31 +0200] "GET /.env.remote HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.197.145.48 - - [25/Sep/2026:17:55:31 +0200] "GET /.env.bak HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.197.145.48 - - [25/Sep/2026:17:55:31 +0200] "GET /.env.backup HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.197.145.48 - - [25/Sep/2026:17:55:32 +0200] "GET /.env.save HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.197.145.48 - - [25/Sep/2026:17:55:32 +0200] "GET /.env.old HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.197.145.48 - - [25/Sep/2026:17:55:32 +0200] "GET / show less	Web App Attack Hacking
🇫🇷 masterguru	2026-09-23 10:32:15 UTC · (1 month ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 11:05:35 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 35.197.145.48 (48.145.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:05:28.428210 2026] [security2:error] [pid 8902:tid 8 ... show more (mod_security) mod_security (id:210492) triggered by 35.197.145.48 (48.145.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:05:28.428210 2026] [security2:error] [pid 8902:tid 8902] [client 35.197.145.48:44766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allieleejieun.click"] [uri "/.git/config"] [unique_id "arJg-H2x-a0fMlEuWQrJaQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-22 09:43:47 UTC · (1 month ago)	Web application attack detected.	Web App Attack
🇺🇸 TPI-Abuse	2026-09-21 20:37:28 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 35.197.145.48 (48.145.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:37:23.877910 2026] [security2:error] [pid 19553:tid ... show more (mod_security) mod_security (id:210492) triggered by 35.197.145.48 (48.145.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:37:23.877910 2026] [security2:error] [pid 19553:tid 19553] [client 35.197.145.48:37458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aeomis.com"] [uri "/.git/config"] [unique_id "arGVg_RYqcASbtzNyhLUswAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-21 18:44:56 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 35.197.145.48 (48.145.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:44:53.017335 2026] [security2:error] [pid 9363:tid 9 ... show more (mod_security) mod_security (id:210492) triggered by 35.197.145.48 (48.145.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:44:53.017335 2026] [security2:error] [pid 9363:tid 9363] [client 35.197.145.48:35918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "airdriedrivingschool.com"] [uri "/.git/config"] [unique_id "arF7JXS_Z5PsXgk8z6QyZQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 zynex	2026-09-21 16:02:46 UTC · (1 month ago)	URL Probing: /app/.env	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.32.162.84

🇺🇸 185.61.222.15

🇲🇴 182.93.7.194

🇷🇺 176.62.76.143

🇨🇴 161.18.147.231

🇨🇳 123.191.154.228

🇨🇳 117.11.89.181

🇨🇳 106.117.114.45

🇮🇳 103.25.47.94

🇺🇸 91.230.168.60

🇺🇸 91.230.168.47

🇮🇶 65.20.143.114

🇷🇴 2.57.121.25

🇦🇷 2800:2130:8100:1885:8463:db1d:cb13:9521

🇺🇦 188.239.206.193

🇺🇦 185.223.115.175

🇲🇾 175.145.216.235

🇩🇪 167.94.146.62

🇸🇦 84.13.138.141

🇷🇴 80.94.92.12