JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.139.237

35.228.139.237 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	237.139.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.139.237

Whois 35.228.139.237

IP Abuse Reports for 35.228.139.237:

This IP address has been reported a total of 35 times from 27 distinct sources. 35.228.139.237 was first reported on June 8th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 updown.io	2026-06-10 22:30:13 (1 hour ago)	{"level":"info","ts":1781130608.835547,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1781130608.835547,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.228.139.237","remote_port":"32984","client_ip":"35.228.139.237","proto":"HTTP/1.1","method":"GET","host":"api.status.purse.io","uri":"/.env.local","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/71.0.3578.98 Chrome/71.0.3578.98 Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"api.status.purse.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000405472,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1781130608.843211,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.228.139.237","remote_port":"33028","client_ip":"35.228.139.237","proto":"HTTP/1.1", ... show less	DDoS Attack Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-10 21:59:31 (2 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09. show less	Web App Attack SSH Hacking
Anonymous	2026-06-10 21:56:06 (2 hours ago)	Bot / scanning and/or hacking attempts: GET /app/.env HTTP/1.1, GET /.env.old HTTP/1.1, GET /config/ ... show more Bot / scanning and/or hacking attempts: GET /app/.env HTTP/1.1, GET /.env.old HTTP/1.1, GET /config/.env.production HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-06-10 21:39:12 (2 hours ago)	Bot / seems abusive / Apache connections: 122	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-06-10 16:33:06 (7 hours ago)	Multiple WAF Violations	Web App Attack
🇬🇧 Axel	2026-06-10 16:30:02 (7 hours ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env~ Server ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env~ Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇳🇱 Mangelot Hosting	2026-06-10 15:42:59 (8 hours ago)	(modsecurity) srv201 ModSecurity 35.228.139.237 (FI/Finland/237.139.228.35.bc.googleusercontent.com) ... show more (modsecurity) srv201 ModSecurity 35.228.139.237 (FI/Finland/237.139.228.35.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-10 15:00:04 (9 hours ago)	categories: DDoS Attack	DDoS Attack
🇫🇷 masterguru	2026-06-10 11:54:12 (12 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.228.139.237 (FI/Finland/237.139.22 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.228.139.237 (FI/Finland/237.139.228.35.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 tentwentyfour	2026-06-10 11:15:03 (13 hours ago)	Blocked for probing for sensitive web application components	Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-06-10 10:49:01 (13 hours ago)	trying wp-login.php/xmlrpc.php 146 times in 1 minutes	Brute-Force Web App Attack
🇫🇮 YF	2026-06-10 09:00:22 (15 hours ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇳🇱 Site.eu	2026-06-10 06:12:35 (18 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 iNetWorker	2026-06-10 03:23:40 (20 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇷 masterguru	2026-06-10 01:10:08 (23 hours ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.222

🇷🇺 91.238.28.195

🇺🇸 23.21.20.21

🇺🇸 20.49.61.50

🇳🇱 195.178.110.199

🇳🇱 195.178.110.26

🇧🇷 187.63.23.248

🇫🇮 147.185.133.249

🇭🇰 114.111.54.189

🇺🇸 91.230.168.209

🇷🇺 81.30.212.94

🇸🇬 45.78.206.111

🇺🇸 34.162.181.107

🇧🇷 177.128.224.122

🇩🇪 176.65.132.149

🇩🇪 173.194.10.72

🇺🇸 170.9.16.186

🇷🇺 91.238.28.134

🇮🇱 89.139.140.173

🇷🇺 87.250.224.31