JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.189.47

35.228.189.47 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 92%: ?

92%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	47.189.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.189.47

Whois 35.228.189.47

IP Abuse Reports for 35.228.189.47:

This IP address has been reported a total of 23 times from 16 distinct sources. 35.228.189.47 was first reported on August 26th 2026, and the most recent report was 38 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-28 16:38:59 (38 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 12:38:54.175734 2026] [security2:error] [pid 4718:tid 4718] [client 35.228.189.47:38550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "criticalmassofficial.com"] [uri "/app/.git/config"] [unique_id "apG5nlkaxIcMhuujlI342AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 14:26:05 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:25:57.338935 2026] [security2:error] [pid 11811:tid 11811] [client 35.228.189.47:38818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.indicadores.gabosoftware.com"] [uri "/api/.git/config"] [unique_id "apGadSV7L6SPnz2RnJEoJQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 14:10:57 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:10:49.111531 2026] [security2:error] [pid 31010:tid 31010] [client 35.228.189.47:50546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tausiet.com"] [uri "/htdocs/.git/config"] [unique_id "apGW6UkXoY6jLSu0BSB0IQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-28 13:52:13 (3 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇵🇱 sigurg	2026-08-28 13:38:59 (3 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 LRob	2026-08-28 10:50:52 (6 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /htdocs/.git/config (+11 more) \| 2026-08-28 10:50 UTC show less	Hacking Web App Attack
🇫🇷 LRob	2026-08-28 00:06:07 (17 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /src/.git/config \| 2026-08-28 00:06 UTC show less	Hacking Web App Attack
🇬🇧 kie	2026-08-27 23:14:56 (18 hours ago)	27-08-2026:23:14:08UTC [Nginx Web Server] Suspicious web request: path:/.git (12 request(s)).	Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-08-27 22:50:12 (18 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-mnz6-4)	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-27 22:00:36 (19 hours ago)	Auto-ban: >3000 req/min op 2026-08-27	Web App Attack SSH Hacking
🇳🇱 debestelapp	2026-08-27 18:05:07 (23 hours ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 17:39:43 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 13:39:38.649294 2026] [security2:error] [pid 12928:tid 12928] [client 35.228.189.47:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totalsafe-security.com"] [uri "/.git/config"] [unique_id "apB2WrqzCfA28wgbnrGVFQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 15:20:25 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.189.47 (47.189.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:20:17.682554 2026] [security2:error] [pid 5792:tid 5792] [client 35.228.189.47:43792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skincare.kalosgroups.com"] [uri "/htdocs/.git/config"] [unique_id "apBVsQaWDLBsrZnwxzGm1gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 FEWA	2026-08-27 09:47:01 (1 day ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-08-27 08:58:03 (1 day ago)	Too many 404 requests [BY]	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 200.108.184.149

🇺🇸 162.158.79.178

🇫🇷 2400:cb00:19:1000:7b36:1e11:e0ef:b13b

🇸🇬 172.253.211.85

🇺🇸 172.71.194.79

🇺🇸 147.185.132.19

🇨🇳 120.48.147.81

🇺🇸 104.22.104.22

🇺🇦 46.150.81.170

🇬🇧 35.203.211.29

🇨🇭 34.65.75.243

🇺🇸 34.63.245.57

🇻🇳 14.225.206.187

🇫🇷 2400:cb00:19:1000:907:afbc:1b5d:a415

🇹🇼 220.133.219.16

🇫🇷 172.71.127.86

🇧🇩 103.61.240.199

🇨🇳 42.234.191.126

🇸🇳 41.208.191.74

🇭🇰 34.92.203.160