JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.242.229.148

35.242.229.148 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 48%: ?

48%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	148.229.242.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.242.229.148

Whois 35.242.229.148

IP Abuse Reports for 35.242.229.148:

This IP address has been reported a total of 11 times from 9 distinct sources. 35.242.229.148 was first reported on June 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-08 22:04:02 (1 week ago)	Auto-ban: >3000 req/min op 2026-06-08	Web App Attack SSH Hacking
🇫🇷 COMAITE	2026-06-08 15:59:53 (1 week ago)	Suspicious URL access.	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 12:55:11 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 35.242.229.148 (148.229.242.35.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 35.242.229.148 (148.229.242.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 08:54:57.956071 2026] [security2:error] [pid 24317:tid 24317] [client 35.242.229.148:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ipv6.luisguacache.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipv6.luisguacache.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aia7oab2CCa_MBfCDdBVxAAAAD4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-06-08 11:11:49 (1 week ago)	{"level":"info","ts":1780917108.2781293,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1780917108.2781293,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.242.229.148","remote_port":"40692","client_ip":"35.242.229.148","proto":"HTTP/1.1","method":"GET","host":"cbaupdate.yupdate.utsrqpojihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/actuator/logfile","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3875.0 Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000070244,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://cbaupdate.yupdate.utsrqpojihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/actuator/logfile"],"Content-Type":[]}} {"level":"info","ts":1780917108.2853239,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.242.229. ... show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 11:09:07 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 35.242.229.148 (148.229.242.35.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 35.242.229.148 (148.229.242.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 07:09:01.161930 2026] [security2:error] [pid 19171:tid 19171] [client 35.242.229.148:39310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kittysalterations.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kittysalterations.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiaizT8Iq6wtVVfPUUcYSQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-06-08 10:59:14 (1 week ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.242.229.148 (DE/Germany/148.229.242.3 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.242.229.148 (DE/Germany/148.229.242.35.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.242.229.148 - - [08/Jun/2026:12:59:11 +0200] "GET /.aws/credentials HTTP/1.1" 404 10424 "-" "Opera/9.64 (X11; Linux i686; U; Linux Mint; nb) Presto/2.1.1" "-" host=fornax.spacehosting.ovh 35.242.229.148 - - [08/Jun/2026:12:59:11 +0200] "GET /config/.aws/credentials HTTP/1.1" 404 10431 "-" "Mozilla/5.0 (Linux; Android 9; POCO F1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36" "-" host=fornax.spacehosting.ovh show less	Port Scan
🇩🇪 kivitendo.de	2026-06-08 09:03:37 (1 week ago)	[Mon Jun 08 11:03:43.311641 2026] [authz_core:error] [pid 46359:tid 46359] [client 35.242.229.148:40 ... show more [Mon Jun 08 11:03:43.311641 2026] [authz_core:error] [pid 46359:tid 46359] [client 35.242.229.148:40212] AH01630: client denied by server configuration: /var/www/filterbox.de/.htpasswd [Mon Jun 08 11:03:43.317773 2026] [authz_core:error] [pid 46374:tid 46374] [client 35.242.229.148:40226] AH01630: client denied by server configuration: /var/www/filterbox.de/.htaccess ... show less	Brute-Force Web App Attack
Anonymous	2026-06-08 08:06:58 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 35.242.229.148 (DE/Germany/148.229.242. ... show more (mod_security) mod_security triggered on hostname [redacted] 35.242.229.148 (DE/Germany/148.229.242.35.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-06-08 07:28:23 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 35.242.229.148 (148.229.242.35.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 35.242.229.148 (148.229.242.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:28:15.088260 2026] [security2:error] [pid 1356:tid 1356] [client 35.242.229.148:53428] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gif.areafinancieratf.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gif.areafinancieratf.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiZvD7VZ5bDcDKHyWrjtUQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-06-08 04:20:03 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-06-08 00:19:08 (1 week ago)	Multiple web server 400 error codes from same source ip	Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 144.123.76.111

🇳🇱 92.67.13.123

🇳🇱 91.92.42.61

🇮🇷 85.198.19.242

🇷🇴 80.94.92.171

🇫🇷 51.178.114.78

🇨🇳 218.25.89.208

🇬🇧 195.96.139.111

🇺🇸 162.216.149.93

🇺🇸 143.244.168.218

🇺🇸 143.244.152.105

🇫🇷 143.244.57.118

🇺🇸 124.198.131.231

🇨🇳 120.229.120.30

🇨🇳 117.147.109.125

🇺🇸 100.54.132.1

🇱🇹 45.227.254.170

🇳🇱 45.148.10.152

🇫🇮 45.87.249.146

🇬🇧 35.203.211.214