JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.198.80.112

35.198.80.112 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 60%: ?

60%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	112.80.198.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.198.80.112

Whois 35.198.80.112

IP Abuse Reports for 35.198.80.112:

This IP address has been reported a total of 11 times from 11 distinct sources. 35.198.80.112 was first reported on June 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 rubixstudios	2026-06-08 15:41:02 (1 week ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇦🇹 penguin-solutions.at	2026-06-08 11:17:59 (1 week ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇬🇧 consul.to	2026-06-08 09:24:55 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-08 08:00:41 (1 week ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 mnsf	2026-06-08 06:07:56 (1 week ago)	Scanning/Probing (61) Request Overload (383)	Brute-Force Web App Attack
🇩🇪 updown.io	2026-06-08 05:24:23 (1 week ago)	{"level":"info","ts":1780896254.2867193,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1780896254.2867193,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.198.80.112","remote_port":"41316","client_ip":"35.198.80.112","proto":"HTTP/1.1","method":"GET","host":"status-c0401-1bf31f8b-0aa4-42d3-b310-c91e6ec14e6e.provacy.com","uri":"/api/configprops","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Linux; Android 8.0.0; HTC U11 plus) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status-c0401-1bf31f8b-0aa4-42d3-b310-c91e6ec14e6e.provacy.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.004803507,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1780896254.2938423,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"3 ... show less	DDoS Attack Web App Attack
🇫🇷 Octopuce	2026-06-08 05:04:53 (1 week ago)	Aggressive web search of vulnerable pages: /phpinfo.php /info.php /php.php /test.php /debug.php /php ... show more Aggressive web search of vulnerable pages: /phpinfo.php /info.php /php.php /test.php /debug.php /phptest.php /api/phpinfo.php /admin/phpinfo.ph ... show less	Web App Attack
🇳🇱 Savvii	2026-06-08 03:58:43 (1 week ago)	73 attempts against mh-misbehave-ban on bean	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-06-08 03:45:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 4server	2026-06-08 03:06:39 (1 week ago)	[MonJun0805:06:36.1761632026][security2:error][pid570740:tid570857][client35.198.80.112:0]ModSecurit ... show more [MonJun0805:06:36.1761632026][security2:error][pid570740:tid570857][client35.198.80.112:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.cnv.wildpferde.ch\"][uri\"/actuator/heapdump\"][unique_id\"aiYxvF7Pnjp6y9wENWRDoQAAANU\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 01:38:02 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 35.198.80.112 (112.80.198.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 35.198.80.112 (112.80.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 21:37:57.167137 2026] [security2:error] [pid 22330:tid 22355] [client 35.198.80.112:39556] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.advantagepluscaregivers.richardleeweatherman.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.advantagepluscaregivers.richardleeweatherman.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiYc9ZgQATpHGyIy-Er1wQAAAJc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.212

🇸🇪 155.4.245.222

🇨🇳 49.72.213.251

🇻🇳 45.117.179.232

🇫🇷 82.102.18.118

🇫🇮 74.125.74.154

🇫🇷 51.68.34.131

🇺🇸 47.77.215.90

🇳🇱 45.156.128.154

🇬🇧 2a06:4884:5000::6a

🇧🇷 179.228.54.137

🇳🇱 176.65.149.224

🇬🇧 84.8.155.112

🇷🇺 5.167.70.95

🇫🇮 178.20.210.151

🇹🇷 151.135.193.109

🇮🇳 122.176.117.147

🇺🇸 108.62.56.82

🇫🇷 75.119.132.28

🇺🇸 66.132.186.128