JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.191.59

35.228.191.59 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 98%: ?

98%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	59.191.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.191.59

Whois 35.228.191.59

IP Abuse Reports for 35.228.191.59:

This IP address has been reported a total of 28 times from 17 distinct sources. 35.228.191.59 was first reported on September 1st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-09-02 11:25:22 (1 hour ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-02 11:24:06 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 07:24:01.126770 2026] [security2:error] [pid 10580:tid 10580] [client 35.228.191.59:36550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextlevelcharge.savingshvac.com"] [uri "/.git/config"] [unique_id "apgHURVjQGO1d1GQhgcTJAAAAIQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-09-02 08:56:33 (3 hours ago)	Suspicious URL access.	Web App Attack
🇳🇿 Antinson	2026-09-02 06:44:00 (5 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-02 05:43:19 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:43:10.460169 2026] [security2:error] [pid 27471:tid 27488] [client 35.228.191.59:48954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newyorkfreepress.aafm.us"] [uri "/.git/config"] [unique_id "ape3bpADqdVK4fdVbLYYWwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-09-02 04:53:16 (7 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇧🇷 Halux	2026-09-02 04:15:10 (8 hours ago)	35.228.191.59 Probing protected path or service	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 03:44:54 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:44:48.833087 2026] [security2:error] [pid 28159:tid 28159] [client 35.228.191.59:51146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newsubdomain.markgiffin.com"] [uri "/.git/config"] [unique_id "apebsN-tfPL1K5EkLUBXHgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-02 03:35:29 (9 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-02 03:19:24 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:19:20.776710 2026] [security2:error] [pid 30204:tid 30225] [client 35.228.191.59:32878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newsrank.hdtv55.com"] [uri "/.git/config"] [unique_id "apeVuOr_vte_yOTaxpNUGgAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 02:31:45 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:31:41.718846 2026] [security2:error] [pid 1042498:tid 1042523] [client 35.228.191.59:46024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newsletter.juantrece.com"] [uri "/.git/config"] [unique_id "apeKjUbbcp_o7OEQv-6xZQAAAY8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 gadix	2026-09-02 02:16:58 (10 hours ago)	[02/Sep/2026:04:16:57.427383 +0200] apeHGQF6drznIpyPWm6fjQAAAAY 35.228.191.59 36604 127.0.0.1 7081 [ ... show more [02/Sep/2026:04:16:57.427383 +0200] apeHGQF6drznIpyPWm6fjQAAAAY 35.228.191.59 36604 127.0.0.1 7081 [02/Sep/2026:04:16:58.080238 +0200] apeHGgCzUAe-XhRquEyTVgAAAAE 35.228.191.59 36616 127.0.0.1 7081 [02/Sep/2026:04:16:58.126634 +0200] apeHGgB74zu2FtEcBPEMcwAAAAA 35.228.191.59 36628 127.0.0.1 7081 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 02:12:17 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:12:12.443737 2026] [security2:error] [pid 27281:tid 27281] [client 35.228.191.59:38836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newsite.wizind.com"] [uri "/.git/config"] [unique_id "apeF_A-wqtXkja_ydEdnJQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-09-02 01:31:56 (11 hours ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 01:10:34 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.191.59 (59.191.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 21:10:27.343852 2026] [security2:error] [pid 31895:tid 31895] [client 35.228.191.59:50718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newschristianview.afjm.net"] [uri "/.git/config"] [unique_id "apd3gyCH3O8TaviJD80VoQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a01:111:f403:c201::6

🇪🇨 190.131.133.90

🇨🇱 179.60.70.216

🇵🇭 124.105.218.149

🇺🇸 73.244.142.116

🇺🇸 66.132.172.222

🇳🇬 41.219.149.74

🇧🇬 5.188.206.30

🇺🇸 205.210.31.90

🇦🇷 190.122.146.76

🇵🇾 181.233.102.171

🇧🇴 181.115.192.10

🇺🇸 165.227.101.124

🇸🇬 161.118.200.156

🇮🇹 151.25.100.29

🇨🇳 123.245.85.118

🇨🇦 85.217.149.72

🇺🇸 73.58.242.153

🇨🇳 14.155.243.129

🇮🇳 223.185.18.8