JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.137.225

35.228.137.225 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	225.137.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.137.225

Whois 35.228.137.225

IP Abuse Reports for 35.228.137.225:

This IP address has been reported a total of 36 times from 24 distinct sources. 35.228.137.225 was first reported on September 15th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-09-17 03:09:00 (1 hour ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 dot.mg	2026-09-17 02:14:02 (2 hours ago)	Bad behaviour	Web Spam
Anonymous	2026-09-16 16:21:58 (12 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FI, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FI, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 16:06:48 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:06:42.978008 2026] [security2:error] [pid 1336:tid 1336] [client 35.228.137.225:46414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.landjudging.com.watongacommunitycats.org"] [uri "/.git/config"] [unique_id "aqq-kmzuHVICMNYD-bw-ZAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 14:57:52 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:57:48.379961 2026] [security2:error] [pid 17318:tid 17318] [client 35.228.137.225:46112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lamineparke.chevronparkett.com"] [uri "/.git/config"] [unique_id "aqqubCPUIzYrEIc4Ofd2sAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-16 14:41:44 (13 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config \| 2026-09-16 14:41 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 13:36:47 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:36:40.476042 2026] [security2:error] [pid 22226:tid 22226] [client 35.228.137.225:52764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lakependoreillemobility.com.kh6jim.com"] [uri "/.git/config"] [unique_id "aqqbaLis113d8fHT7t1EVgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 13:10:38 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:10:30.999828 2026] [security2:error] [pid 19144:tid 19144] [client 35.228.137.225:54684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lajose2.lajoze.com"] [uri "/.git/config"] [unique_id "aqqVRp66fNgiA6qXZOiNjQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-16 13:05:03 (15 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
Anonymous	2026-09-16 12:56:56 (15 hours ago)	Web application attack detected.	Web App Attack
🇩🇪 tentwentyfour	2026-09-16 12:54:20 (15 hours ago)	Blocked for probing for sensitive web application components	Brute-Force Web App Attack
🇫🇷 masterguru	2026-09-16 10:00:25 (18 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-09-16 09:47:14 (18 hours ago)	CloudLinux/Plesk alert - host=cloudlinux dominio=liberazionesperanza.it ip=35.228.137.225 richieste= ... show more CloudLinux/Plesk alert - host=cloudlinux dominio=liberazionesperanza.it ip=35.228.137.225 richieste=165 rischio=ALTO score=14 motivi=molte_richieste,molte_uri_uniche,path_sospetti,api,poco_statico,dinamico cat_id=21,19 periodo=10min show less	Web App Attack Bad Web Bot
🇳🇱 ConsulHosting	2026-09-16 09:10:16 (19 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 07:43:15 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 35.228.137.225 (225.137.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:43:12.284198 2026] [security2:error] [pid 31718:tid 31726] [client 35.228.137.225:50310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.liamkiriadcompany.brucejoell.com"] [uri "/.git/config"] [unique_id "aqpIkPDChP4qy7HMX4IBqwAAAEQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 8.222.217.13

🇨🇳 220.187.183.251

🇺🇸 209.85.160.231

🇵🇪 200.37.103.36

🇺🇸 194.5.52.6

🇮🇳 185.100.212.141

🇨🇴 181.58.39.68

🇺🇸 147.185.132.61

🇺🇸 147.93.139.252

🇮🇳 122.187.230.183

🇨🇳 117.136.73.212

🇿🇦 102.219.231.23

🇺🇸 66.132.195.99

🇺🇸 66.132.172.231

🇮🇩 66.96.245.126

🇺🇦 62.16.15.168

🇺🇸 45.79.82.114

🇺🇸 8.235.29.250

🇩🇪 217.154.152.20

🇩🇪 194.88.98.92