JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.204.145.238

35.204.145.238 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	238.145.204.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.204.145.238

Whois 35.204.145.238

IP Abuse Reports for 35.204.145.238:

This IP address has been reported a total of 60 times from 45 distinct sources. 35.204.145.238 was first reported on October 12th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 simpeg-adm.bandung.go.id	2026-10-12 22:13:34 (3 days ago)	12/Oct/2026:22:13:33 +0000;35.204.145.238;"/robots.txt" 12/Oct/2026:22:13:33 +0000;35.204.145.238;"/ ... show more 12/Oct/2026:22:13:33 +0000;35.204.145.238;"/robots.txt" 12/Oct/2026:22:13:33 +0000;35.204.145.238;"/signin" 12/Oct/2026:22:13:33 +0000;35.204.145.238;"/signup" 12/Oct/2026:22:13:33 +0000;35.204.145.238;"/account/login" 12/Oct/2026:22:13:33 +0000;35.204.145.238;"/user/login" 12/Oct/2026:22:13:33 +0000;35.204.145.238;"/app" 12/Oct/2026:22:13:33 +0000;35.204.145.238;"/login" ... show less	Web Spam Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-10-12 22:01:04 (3 days ago)	Auto-ban: >3000 req/min op 2026-10-12	Web App Attack SSH Hacking
🇳🇱 Savvii	2026-10-12 20:16:26 (3 days ago)	20 attempts against mh-misbehave-ban on onion	Brute-Force Bad Web Bot Web App Attack
🇺🇸 deskpass.com	2026-10-12 20:08:21 (3 days ago)	POST /index.php	Web App Attack
🇨🇦 cubie	2026-10-12 18:05:50 (3 days ago)	Port Scan: Admin Enumeration - Reported by CubieCloud Firewall [CFW_H497-004]	Port Scan
🇳🇱 Alt255	2026-10-12 17:42:07 (3 days ago)	[cb-13al] Excessive 404 errors (web scanning): 29 suspicious requests detected by fail2ban jail apac ... show more [cb-13al] Excessive 404 errors (web scanning): 29 suspicious requests detected by fail2ban jail apache-404. Example: 35.204.145.238 - - [12/Oct/2026:19:41:46 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 35.204.145.238 - - [12/Oct/2026:19:41:46 +0200] "GET /gwg4sultxgaiqajyhgbu HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 35.204.145.238 - - [12/Oct/2026:19:41:46 +0200] "GET /dist/manifest.json HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 35.204.145.238 - - [12/Oct/2026:19:41:46 +0200] "POST /v1/graphql HTTP/2.0" 404 1855 "https://account.dutchtallship.com" "Mozilla/5.0 (X11; Linux ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-12 15:59:11 (4 days ago)	[Mon Oct 12 15:47:47.068963 2026] [proxy_fcgi:error] [pid 2029340:tid 2029344] [remote 35.204.145.23 ... show more [Mon Oct 12 15:47:47.068963 2026] [proxy_fcgi:error] [pid 2029340:tid 2029344] [remote 35.204.145.238:48452] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇩🇪 Petros Stefanakis	2026-10-12 15:19:38 (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 35.204.145.238 (238.145.204.35.bc.googl ... show more (mod_security) mod_security triggered on hostname [redacted] 35.204.145.238 (238.145.204.35.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 palzer.IT	2026-10-12 15:09:45 (4 days ago)	Fail2ban automatic report for plesk-apache-badbot: 35.204.145.238 - - [12/Oct/2026:17:09:11 +0200] G ... show more Fail2ban automatic report for plesk-apache-badbot: 35.204.145.238 - - [12/Oct/2026:17:09:11 +0200] GET / [DOMAIN_REMOVED] 200 5487 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +claudebot@[DOMAIN_REMOVED]) show less	Bad Web Bot
🇳🇱 SchorelWeb	2026-10-12 15:06:30 (4 days ago)	Cluster member (Omitted) (FR/France/-) said, TEMPDENY 35.204.145.238, Reason:[(Suspicious404) Suspic ... show more Cluster member (Omitted) (FR/France/-) said, TEMPDENY 35.204.145.238, Reason:[(Suspicious404) Suspicious activity detected 35.204.145.238 (NL/The Netherlands/238.145.204.35.bc.googleusercontent.com): 10 in the last 3600 secs] show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-10-12 15:02:26 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 35.204.145.238 (238.145.204.35.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 35.204.145.238 (238.145.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:02:20.429846 2026] [security2:error] [pid 23623:tid 23623] [client 35.204.145.238:48524] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|stacyfarm.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stacyfarm.com"] [uri "/z9x8c7v6b5-debug-trigger-stacyfarm.com"] [unique_id "asz2fIkyr_7hv4Jrao7k2wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-12 14:54:57 (4 days ago)	Aggressive web scan	Web App Attack
Anonymous	2026-10-12 14:50:14 (4 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇳🇱 Savvii	2026-10-12 14:34:17 (4 days ago)	20 attempts against mh-misbehave-ban on moon	Brute-Force Bad Web Bot Web App Attack
🇺🇸 jormaster3k	2026-10-12 14:09:26 (4 days ago)	Attack against Apache (too many 404s)	Web App Attack

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 136.248.242.166

🇩🇪 130.12.180.170

🇬🇧 35.203.211.207

🇪🇨 181.199.121.162

🇺🇸 104.22.62.58

🇵🇱 94.26.88.142

🇻🇳 27.79.123.190

🇺🇸 8.230.127.24

🇮🇩 2406:da19:cdc:7802:149:aa65:d973:dfae

🇮🇳 2401:4900:88ac:163d:78c8:65c5:3f8a:3f78

🇧🇷 179.185.1.97

🇺🇸 136.90.80.32

🇺🇸 130.49.10.244

🇧🇬 79.124.56.246

🇺🇸 66.132.172.104

🇬🇧 35.203.210.108

🇰🇷 1.235.183.146

🇩🇪 217.181.87.126

🇩🇪 195.63.26.132

🇺🇸 162.216.149.156