JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.143.4

35.228.143.4 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 73%: ?

73%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	4.143.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.143.4

Whois 35.228.143.4

IP Abuse Reports for 35.228.143.4:

This IP address has been reported a total of 17 times from 13 distinct sources. 35.228.143.4 was first reported on September 15th 2026, and the most recent report was 23 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 01:09:41 (23 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:09:38.640816 2026] [security2:error] [pid 3056:tid 3056] [client 35.228.143.4:40480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lifeinsmoke.yeejia.net"] [uri "/.git/config"] [unique_id "aqnsUi7RJaMzvUbpEtPeFwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 23:33:08 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:33:03.279551 2026] [security2:error] [pid 16338:tid 16477] [client 35.228.143.4:38788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lifecoachcertification.com.aafm.us"] [uri "/.git/config"] [unique_id "aqnVr1EdWaZWW7TF0O-24AAAAks"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 23:03:14 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:03:07.530770 2026] [security2:error] [pid 1709989:tid 1709989] [client 35.228.143.4:59754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lifebooksource.teamspiro.com"] [uri "/.git/config"] [unique_id "aqnOqz8lCjvyT5aIsgdFUAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-15 22:00:32 (3 hours ago)	Auto-ban: >3000 req/min op 2026-09-15	Web App Attack SSH Hacking
🇳🇱 WeCloudit-Anti-Abuse	2026-09-15 20:41:01 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇪🇸 pipeline.es	2026-09-15 20:35:00 (4 hours ago)	Web scanning / probing for vulnerable paths \| URL: /github/.env \| Evidence: altovolta.es 35.228.143. ... show more Web scanning / probing for vulnerable paths \| URL: /github/.env \| Evidence: altovolta.es 35.228.143.4 - - [15/Sep/2026:22:34:14 +0200] \"GET /github/.env HTTP/1.1\" 404 209 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=FI \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: FI show less	Port Scan Web App Attack
🇨🇭 zynex	2026-09-15 20:34:33 (4 hours ago)	URL Probing: /server/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 20:23:30 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:23:26.199545 2026] [security2:error] [pid 28558:tid 28558] [client 35.228.143.4:37220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.liebherr.pamplonaserviciotecnico.com"] [uri "/.git/config"] [unique_id "aqmpPiG_H6z2nW1M6_LD0wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 netman	2026-09-15 20:06:13 (5 hours ago)	HTTP: 35.228.143.4 blocked because of 500 failures ...	Port Scan Web App Attack
🇳🇱 Alt255	2026-09-15 19:40:15 (5 hours ago)	[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.228.143.4 - - [15/Sep/2026:21:40:14 +0200] "GET /.git/config HTTP/1.1" 301 628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇬🇧 SilverZippo	2026-09-15 17:58:11 (7 hours ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 16:42:32 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.143.4 (4.143.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 12:42:24.685195 2026] [security2:error] [pid 18491:tid 18491] [client 35.228.143.4:50564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.liburumi.tucek.org"] [uri "/.git/config"] [unique_id "aql1cM2sUSoc3SnV5hfPvwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-15 15:52:52 (9 hours ago)	Multiple WAF Violations	Web App Attack
🇮🇹 VHosting	2026-09-15 15:20:03 (10 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
Anonymous	2026-09-15 15:15:35 (10 hours ago)	35.228.143.4 - - [15/Sep/2026:17:15:30 +0200] "GET /.git/config HTTP/1.1" 403 616 "-" "Mozilla/5.0 ( ... show more 35.228.143.4 - - [15/Sep/2026:17:15:30 +0200] "GET /.git/config HTTP/1.1" 403 616 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.143.4 - - [15/Sep/2026:17:15:30 +0200] "GET /.env HTTP/1.1" 403 616 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.143.4 - - [15/Sep/2026:17:15:30 +0200] "GET /.env.local HTTP/1.1" 403 616 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.143.4 - - [15/Sep/2026:17:15:30 +0200] "GET /.env.production HTTP/1.1" 403 616 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.143.4 - - [15/Sep/2026:17:15:30 +0200] "GET /.env.staging HTTP/1.1" 403 616 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom ... show less	DDoS Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇲 216.10.214.146

🇨🇦 165.227.47.218

🇷🇺 91.211.23.39

🇬🇧 89.107.20.59

🇸🇬 47.84.136.36

🇮🇩 36.64.68.99

🇬🇧 8.228.44.176

🇦🇷 190.227.8.44

🇦🇷 186.148.159.53

🇦🇷 186.148.151.53

🇦🇷 186.148.135.53

🇳🇱 185.242.226.90

🇨🇱 181.212.10.44

🇷🇺 176.211.106.206

🇺🇸 162.216.150.115

🇮🇳 103.189.89.196

🇺🇸 91.230.168.70

🇫🇷 90.79.33.206

🇺🇸 74.235.165.79

🇺🇸 64.62.156.202