JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

35.232.134.22

Recent Activity

Abuse Confidence Score

100% Critical

31 reports

18 reporters · latest 3 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 22.134.232.35.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

31 from 18 distinct reporters

First reported

November 11th 2026

Most recent report

3 hours ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 12 🇵🇱 Poland 9 🇩🇪 Germany 3

Most common categories Web App Attack 29 Hacking 13 Bad Web Bot 9 Brute-Force 5 DDoS Attack 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-14 03:22:59 UTC · (3 hours ago)	35.232.134.22 - - [14/Nov/2026:04:22:57 +0100] "GET /.htpasswd HTTP/1.1" 403 6007 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 35.232.134.22 - - [14/Nov/2026:04:22:57 +0100 ... show more 35.232.134.22 - - [14/Nov/2026:04:22:57 +0100] "GET /.htpasswd HTTP/1.1" 403 6007 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 35.232.134.22 - - [14/Nov/2026:04:22:57 +0100] "GET /heartbeat HTTP/1.1" 404 6004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.232.134.22 - - [14/Nov/2026:04:22:57 +0100] "GET /appsettings.Production.json HTTP/1.1" 404 6004 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 35.232.134.22 - - [14/Nov/2026:04:22:57 +0100] "GET /application-prod.yml HTTP/1.1" 404 6004 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 35.232.134.22 - - [14/Nov/2026:04:22:57 +0100] "GET /.terraform.d/credentials.tfrc.json HTTP/1.1" 404 6004 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 35.232.134.22 - - ... show less	DDoS Attack
🇳🇱 Site.eu	2026-11-14 00:36:33 UTC · (6 hours ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇫🇷 aki	2026-11-13 23:38:33 UTC · (7 hours ago)	Web attack blocked	Web App Attack
🇳🇱 homeshowdomain.nl	2026-11-13 22:59:15 UTC · (7 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.	Web App Attack SSH Hacking
🇳🇱 Alt255	2026-11-13 20:34:00 UTC · (10 hours ago)	[ti-tinov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.232.134.22 - - [13/Nov/2026:21:33:42 +0100] "GET /.env.prod HTTP/1.1" 404 6016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv: ... show more [ti-tinov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.232.134.22 - - [13/Nov/2026:21:33:42 +0100] "GET /.env.prod HTTP/1.1" 404 6016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" 35.232.134.22 - - [13/Nov/2026:21:33:42 +0100] "GET /.next/server/app/page.js HTTP/1.1" 404 6016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.232.134.22 - - [13/Nov/2026:21:33:42 +0100] "GET /firebase.json HTTP/1.1" 404 6017 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 35.232.134.22 - - [13/Nov/2026:21:33:42 +0100] "GET /.env.development HTTP/1.1" 404 6017 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:13 ... show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-13 20:07:22 UTC · (10 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: vpn.definitelynotahoneypot.top \| Path: /.env \| User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: vpn.definitelynotahoneypot.top \| Path: /.env \| User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇬🇧 consul.to	2026-11-13 15:36:53 UTC · (15 hours ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-11-13 15:32:34 UTC · (15 hours ago)	Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=24,9, Rate=0,6, Diversity=10, CanaryOverride=90.	Web App Attack DDoS Attack Bad Web Bot
🇫🇷 Octopuce	2026-11-13 14:30:23 UTC · (16 hours ago)	Aggressive web search of vulnerable pages: /.env.local /docker-compose.prod.yml /dump.sql /docker-compose.yml /.env ...	Web App Attack
🇵🇱 Budyn	2026-11-13 11:32:22 UTC · (19 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: beta.budyn.xyz \| Path: /.next/server/app/page.js \| User-Agent: Mozilla/5.0 (Windows NT 10.0; ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: beta.budyn.xyz \| Path: /.next/server/app/page.js \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇳🇱 Alt255	2026-11-13 11:16:59 UTC · (19 hours ago)	[cb-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.232.134.22 - - [13/Nov/2026:12:16:53 +0100] "GET /.env.js HTTP/1.0" 503 845 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Fire ... show more [cb-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.232.134.22 - - [13/Nov/2026:12:16:53 +0100] "GET /.env.js HTTP/1.0" 503 845 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-11-13 09:41:08 UTC · (21 hours ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.232.134.22 (US/United States/22.134.232.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.232.134.22 - - [13/Nov/2026: ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.232.134.22 (US/United States/22.134.232.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.232.134.22 - - [13/Nov/2026:10:41:06 +0100] "GET /secrets.json HTTP/1.1" 404 1148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" "-" host=gestionale.mediaqualitylab.com show less	Port Scan
🇵🇱 Budyn	2026-11-13 05:10:45 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: staging.astropot.online \| Path: /.env.local \| User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv: ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: staging.astropot.online \| Path: /.env.local \| User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-11-13 02:31:00 UTC · (1 day ago)	[Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: staging.dont-eat-the-pudding.top \| Path: /.npmrc \| User-Agent: Mozilla/5.0 (Windows NT 10.0; ... show more [Budyn Honeypot Sinkhole] \| Attack type: CRITICAL: ModSecurity WAF Exploit Block \| Summary: Request triggered an emulated security trap. \| Evidence: \| Host: staging.dont-eat-the-pudding.top \| Path: /.npmrc \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0 \| Request: [Empty / GET Request] show less	Hacking Web App Attack
🇳🇱 sembeek	2026-11-13 01:41:59 UTC · (1 day ago)	requests blocked by a web application firewall: 6 attempts within 10 minutes, seen by Cloudflare WAF (reported by RemotePower)	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 200.216.172.182

🇧🇪 198.235.24.192

🇺🇦 194.24.237.50

🇺🇸 184.174.13.35

🇩🇪 167.94.146.53

🇺🇸 165.154.134.203

🇨🇲 154.70.102.114

🇫🇷 91.231.89.41

🇰🇷 61.78.148.139

🇬🇧 35.203.210.68

🇺🇸 16.147.19.76

🇧🇷 200.199.32.174

🇺🇸 198.98.55.27

🇫🇷 185.194.178.11

🇵🇹 149.88.20.96

🇨🇱 148.227.97.241

🇺🇸 147.185.132.49

🇮🇳 122.161.53.131

🇹🇭 104.28.214.147

🇨🇳 101.96.197.182