35.245.142.134

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
72 reports
55 reporters ยท latest 14 seconds ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
134.142.245.35.bc.googleusercontent.com
Domain Name
google.com
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
Washington, District of Columbia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
72 from 55 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 17 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 12 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 10
Most common categories Web App Attack 54 Brute-Force 27 Bad Web Bot 26 Hacking 16 Port Scan 7
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ต๐Ÿ‡น WebTejo
Detected multiple authentication failures and invalid user attempts in LF_CPANEL from IP address 35.245.142.134 on [PT] Tucano Node.
Brute-Force SSH
๐Ÿ‡ณ๐Ÿ‡ฑ e.fierstra
excessive HTTP 404 errors
Bad Web Bot
๐Ÿ‡ณ๐Ÿ‡ฑ Site.eu
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 35.245.142.134 (US/United States/134.142.245.35.bc.googleusercontent.com)
SQL Injection
๐Ÿ‡ณ๐Ÿ‡ฑ Alt255
Bad Web Bot Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช Ilop
[hp-100] 4 unsolicited packets to honeypot ports 80,8443,443,8080 (OCI DShield sensor)
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
trying to access non-authorized port
Port Scan
๐Ÿ‡ฎ๐Ÿ‡น CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt
Hacking
๐Ÿ‡ช๐Ÿ‡ธ bohl-aiG5aef
Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound
Hacking
Anonymous
Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Probing for exposed secret / credential files; Web application attack: http sensitive files; Web application attack: http path traversal probing
Hacking Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช Hary74656
Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ Matthew Ping
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on d865.
DDoS Attack Brute-Force
๐Ÿ‡ฌ๐Ÿ‡ง openstrike.co.uk
9 attacks on password/key grabbing URLs: GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/1.1
Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ ams_sec_user
Automated requests against a hosted website: 254 requests between 09:00 and 09:59 UTC; 87 probes for exposed secrets/config files (/__vite_rsc_findSourceMapURL, /_image, /@fs/app/.env.production). Reported automatically.
Hacking Bad Web Bot Web App Attack
Anonymous
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 207.90.244.18
๐Ÿ‡ณ๐Ÿ‡ฑ 200.138.46.210
๐Ÿ‡บ๐Ÿ‡ธ 74.89.166.214
๐Ÿ‡บ๐Ÿ‡ธ 20.84.99.243
๐Ÿ‡ฉ๐Ÿ‡ช 213.209.159.242
๐Ÿ‡จ๐Ÿ‡ณ 101.126.4.240
๐Ÿ‡ฌ๐Ÿ‡ง 35.203.211.73
๐Ÿ‡บ๐Ÿ‡ธ 34.170.231.143
๐Ÿ‡ป๐Ÿ‡ณ 14.225.206.187
๐Ÿ‡ง๐Ÿ‡ท 205.210.31.167
๐Ÿ‡ณ๐Ÿ‡ฑ 204.76.203.213
๐Ÿ‡ฎ๐Ÿ‡ณ 103.248.120.6
๐Ÿ‡ฑ๐Ÿ‡ป 95.68.15.143
๐Ÿ‡ท๐Ÿ‡ด 92.118.39.50
๐Ÿ‡ณ๐Ÿ‡ฑ 79.127.171.223
๐Ÿ‡บ๐Ÿ‡ธ 66.132.195.86
๐Ÿ‡ธ๐Ÿ‡ฌ 45.78.206.111
๐Ÿ‡ฆ๐Ÿ‡ท 192.141.94.54
๐Ÿ‡ฉ๐Ÿ‡ช 167.94.146.61
๐Ÿ‡ท๐Ÿ‡ด 64.7.199.223