JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.254.188.48

35.254.188.48 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 84%: ?

84%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	48.188.254.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.254.188.48

Whois 35.254.188.48

IP Abuse Reports for 35.254.188.48:

This IP address has been reported a total of 18 times from 15 distinct sources. 35.254.188.48 was first reported on August 18th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 IRISIO	2026-08-24 07:23:57 (2 hours ago)	scans/SQL injection/spam posts : 56 queries	Web App Attack SQL Injection
🇺🇸 TPI-Abuse	2026-08-22 08:10:26 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.254.188.48 (48.188.254.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.254.188.48 (48.188.254.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 04:10:20.704099 2026] [security2:error] [pid 4524:tid 4524] [client 35.254.188.48:54482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.test.miroddi.com"] [uri "/.git/HEAD"] [unique_id "aolZbCWmcDO_pUcHOQ-q2QAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-22 06:48:41 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.sweetpuddingtrap.online \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-08-22 05:46:20 (2 days ago)	Web application attack detected.	Web App Attack
🇩🇪 nyt	2026-08-22 04:59:04 (2 days ago)	Sensitive File Probe	Web App Attack
🇩🇪 BlueWire Hosting	2026-08-22 04:43:43 (2 days ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇩🇪 Vegascosmetics	2026-08-22 04:22:28 (2 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git) show less	Hacking Brute-Force Web App Attack
Anonymous	2026-08-22 03:55:02 (2 days ago)	suspicious request in access.log	Web App Attack
🇺🇸 IndigoRidge	2026-08-22 03:47:52 (2 days ago)	35.254.188.48 - - [21/Aug/2026:23:47:50 -0400] "GET /.git/HEAD HTTP/1.0" 404 5745 "-" "Mozilla/5.0 ( ... show more 35.254.188.48 - - [21/Aug/2026:23:47:50 -0400] "GET /.git/HEAD HTTP/1.0" 404 5745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 35.254.188.48 - - [21/Aug/2026:23:47:51 -0400] "GET /.git/HEAD HTTP/1.0" 404 5745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 35.254.188.48 - - [21/Aug/2026:23:47:51 -0400] "GET /.svn/wc.db HTTP/1.0" 404 5745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 35.254.188.48 - - [21/Aug/2026:23:47:51 -0400] "GET /.svn/wc.db HTTP/1.0" 404 5745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 35.254.188.48 - - [21/Aug/2026:23:47:52 -0400] "GET /.hg/store/fncache HTTP/1.0" 404 5745 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safar ... show less	Web App Attack
🇮🇩 Burayot	2026-08-22 02:59:42 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.254.188.48 (US/United States/48. ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.254.188.48 (US/United States/48.188.254.35.bc.googleusercontent.com): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 SCHAPPY	2026-08-22 02:45:03 (2 days ago)	Brute-force attack to identify web exploits	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-08-22 02:39:21 (2 days ago)	[22/Aug/2026:05:39:20 +0300] -- 35.254.188.48 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git ... show more [22/Aug/2026:05:39:20 +0300] -- 35.254.188.48 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/HEAD HTTP/1.1 show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-22 02:17:38 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.definitelynotahoneypot.xyz \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-22 01:58:05 (2 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 01:40:14 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.254.188.48 (48.188.254.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.254.188.48 (48.188.254.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 21:40:06.275490 2026] [security2:error] [pid 12025:tid 12034] [client 35.254.188.48:52574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gafm.org"] [uri "/.git/HEAD"] [unique_id "aoj99h2qVclR4b2KLz2_rwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 176.182.204.219

🇺🇸 173.255.249.14

🇩🇪 94.26.0.39

🇱🇹 62.60.130.148

🇬🇧 2001:41d0:801:2000::5ab5

🇨🇳 223.109.252.200

🇪🇬 197.43.250.243

🇬🇧 193.163.125.177

🇷🇴 193.46.255.86

🇮🇳 183.83.160.197

🇺🇸 148.59.129.124

🇺🇸 136.118.121.74

🇬🇧 118.193.64.235

🇨🇳 115.56.40.177

🇫🇷 85.217.140.54

🇺🇸 66.132.186.159

🇨🇳 59.36.75.227

🇺🇸 45.205.24.168

🇺🇸 45.194.67.61

🇨🇳 223.109.252.227