JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

35.234.45.0

Activity Trending Down

Abuse Confidence Score

52% Elevated

19 reports

17 reporters · latest 3 weeks ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 0.45.234.35.bc.googleusercontent.com
Domain Name: google.com
Country: 🇹🇼 Taiwan
City: Taipei, Taiwan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

19 from 17 distinct reporters

First reported

October 19th 2026

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇬🇧 United Kingdom of Great Britain and Northern Ireland 13 🇩🇪 Germany 3 🇧🇪 Belgium 1

Most common categories Web App Attack 14 Brute-Force 7 Hacking 5 Bad Web Bot 2 SQL Injection 2

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-10-20 16:51:01 UTC · (3 weeks ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-20 UTC.	Brute-Force
🇬🇧 openstrike.co.uk	2026-10-20 05:14:54 UTC · (3 weeks ago)	239 attacks on password/key grabbing URLs, VC URLs, env grabbing URLs, config grabbing URLs (type 2), directory traversals, env grabbing URLs (type 2), PHP URLs: GET /.git-credentials HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /supabase/.env HTTP/1.1 GET / ... show more 239 attacks on password/key grabbing URLs, VC URLs, env grabbing URLs, config grabbing URLs (type 2), directory traversals, env grabbing URLs (type 2), PHP URLs: GET /.git-credentials HTTP/1.1 GET /.git/HEAD HTTP/1.1 GET /supabase/.env HTTP/1.1 GET /config/settings.local.yml HTTP/1.1 GET /..%2f..%2f.env HTTP/1.1 GET /__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc HTTP/1.1 POST /icecoder/lib/file-control.php HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-20 01:10:03 UTC · (3 weeks ago)	Fail2Ban - [NGINX]Rate limit violation on nginx-limit-req ... [ice01,ice02,wa01]	Exploited Host
🇩🇪 ghostwarriors	2026-10-19 20:50:07 UTC · (3 weeks ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-10-19 20:48:26 UTC · (3 weeks ago)	35.234.45.0 - - [19/Oct/2026:22:48:23 +0200] "GET /static/../../../a/../../../../proc/self/environ HTTP/2.0" 400 332 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 35.234.45.0 - - [19/Oct/ ... show more 35.234.45.0 - - [19/Oct/2026:22:48:23 +0200] "GET /static/../../../a/../../../../proc/self/environ HTTP/2.0" 400 332 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 35.234.45.0 - - [19/Oct/2026:22:48:23 +0200] "GET /sign-in HTTP/2.0" 404 302 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 35.234.45.0 - - [19/Oct/2026:22:48:23 +0200] "GET /signup HTTP/2.0" 404 302 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 35.234.45.0 - - [19/Oct/2026:22:48:23 +0200] "GET /dashboard HTTP/2.0" 404 302 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 35.234.45.0 - - [19/Oct/2026:22:48:23 +0200] "GET /user/login HTTP/2.0" 404 302 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safar show less	Web App Attack Hacking
🇬🇧 D3monite	2026-10-19 20:08:04 UTC · (3 weeks ago)	Attempted Brute Force (APIService)	Brute-Force
🇧🇪 cmbplf	2026-10-19 18:30:53 UTC · (3 weeks ago)	3.224 requests with url.path .env 736 requests with url.path /@fs/* 288 requests with url.path /proc/ 244 requests with url.path .ssh/ 144 requests with url.path .aws/	Brute-Force Bad Web Bot
🇬🇧 AvonleaConsulting	2026-10-19 17:16:12 UTC · (3 weeks ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇫🇮 KTSTechnology	2026-10-19 17:12:43 UTC · (3 weeks ago)	Web vulnerability scanning detected by our ISP firewall	Web App Attack
🇬🇧 SwinT	2026-10-19 16:00:05 UTC · (3 weeks ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-19 15:08:01 UTC · (3 weeks ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01,wa02]	Hacking SQL Injection Web App Attack
🇬🇧 bensmithurst	2026-10-19 14:54:19 UTC · (3 weeks ago)	35.234.45.0 - - [19/Oct/2026:14:54:18 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-" 35.234.45.0 - - [19/Oct/2026:14:54:18 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-" 35.234.45.0 - - [ ... show more 35.234.45.0 - - [19/Oct/2026:14:54:18 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-" 35.234.45.0 - - [19/Oct/2026:14:54:18 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-" 35.234.45.0 - - [19/Oct/2026:14:54:18 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-" 35.234.45.0 - - [19/Oct/2026:14:54:19 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-" 35.234.45.0 - - [19/Oct/2026:14:54:19 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-" ... [host=LAN***] show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-19 13:17:02 UTC · (3 weeks ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01,wa02]	Hacking SQL Injection Web App Attack
🇬🇧 Apache	2026-10-19 12:43:17 UTC · (3 weeks ago)	(mod_security) mod_security (id:20000010) triggered by 35.234.45.0 (TW/Taiwan/0.45.234.35.bc.googleusercontent.com): 5 in the last 300 secs	Brute-Force Web App Attack
🇩🇪 updown.io	2026-10-19 12:18:24 UTC · (3 weeks ago)	{"level":"info","ts":1792412301.8994062,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.234.45.0","remote_port":"52928","client_ip":"35.234.45.0","proto":"HTTP/2.0","method":"GET","host":"status.unit27.co.uk","uri": ... show more {"level":"info","ts":1792412301.8994062,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.234.45.0","remote_port":"52928","client_ip":"35.234.45.0","proto":"HTTP/2.0","method":"GET","host":"status.unit27.co.uk","uri":"/assets/manifest.json","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Language":["en-US,en;q=0.9"],"Accept":["/"],"Sec-Fetch-Dest":["script"],"Sec-Fetch-Site":["same-origin"],"Priority":["u=1"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Mode":["no-cors"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Brave\";v=\"152\""],"Accept-Encoding":["gzip, deflate, br, z ... show less	DDoS Attack Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 2400:6180:0:d2:0:3:55d1:e000

🇩🇪 213.61.187.253

🇮🇷 193.141.65.142

🇧🇷 187.51.84.86

🇺🇸 162.216.150.18

🇺🇸 147.185.132.238

🇲🇽 104.28.231.133

🇳🇱 81.19.216.123

🇩🇪 5.253.235.92

🇺🇸 195.184.76.103

🇺🇸 193.202.9.17

🇹🇭 183.88.49.216

🇺🇸 172.66.47.18

🇺🇸 147.185.132.22

🇺🇸 137.184.151.149

🇵🇱 94.26.68.131

🇪🇸 86.127.229.198

🇰🇿 77.240.39.64

🇳🇱 45.148.10.157

🇧🇪 198.235.24.241