JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.207.12

35.228.207.12 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 84%: ?

84%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	12.207.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.207.12

Whois 35.228.207.12

IP Abuse Reports for 35.228.207.12:

This IP address has been reported a total of 20 times from 14 distinct sources. 35.228.207.12 was first reported on August 30th 2026, and the most recent report was 42 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-31 11:29:39 (42 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:29:34.840649 2026] [security2:error] [pid 32209:tid 32209] [client 35.228.207.12:42552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.omegacares.com.au.tckgbookkeeping.biz"] [uri "/.git/config"] [unique_id "apVlnoG5eKcAJh6ggYz53wAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 10:53:35 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:53:30.582524 2026] [security2:error] [pid 1088:tid 1088] [client 35.228.207.12:44820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.omahareact.rcto.us"] [uri "/.git/config"] [unique_id "apVdKkCkV5pUVtK6Sw32gwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-31 10:37:03 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇦🇺 screwlooseit.com.au	2026-08-31 10:11:37 (2 hours ago)	Blocked by CSF 13 firewall - Rule: config-dotfile 12.207.228.35.bc.googleusercontent.com	Web App Attack
🇸🇪 vaia.cloud	2026-08-31 10:05:02 (2 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 08:46:20 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:46:14.997366 2026] [security2:error] [pid 10360:tid 10360] [client 35.228.207.12:47380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oliver.pattenden.com"] [uri "/.git/config"] [unique_id "apU_VosVOJcm63Yg3OW2FwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-31 07:17:28 (4 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-08-31 06:54:47 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:54:40.292782 2026] [security2:error] [pid 3599578:tid 3599602] [client 35.228.207.12:45010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oldpl8s.com.oldcarz.com"] [uri "/.git/config"] [unique_id "apUlMBi4F3ccsRvA2hp23AAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 06:33:40 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.207.12 (12.207.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:33:32.103381 2026] [security2:error] [pid 15500:tid 15505] [client 35.228.207.12:55786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oldestgunclub.aafm.us"] [uri "/.git/config"] [unique_id "apUgPGfffb1shkAVnPeUrQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 iulianh	2026-08-31 06:14:43 (5 hours ago)	80,443	Brute-Force SSH
🇸🇪 vaia.cloud	2026-08-31 04:30:01 (7 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-30 21:59:24 (14 hours ago)	Auto-ban: >3000 req/min op 2026-08-30	Web App Attack SSH Hacking
🇫🇷 Octopuce	2026-08-30 08:31:11 (1 day ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇫🇷 claude CALVET	2026-08-30 08:08:29 (1 day ago)	gee-17 : Block hidden directories=>/.env.local(/)	Hacking
Anonymous	2026-08-30 07:50:02 (1 day ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 157.22.72.91

🇩🇪 157.90.243.44

🇬🇧 157.22.45.72

🇨🇦 107.171.132.32

🇫🇷 83.167.47.96

🇩🇪 69.5.169.50

🇳🇱 45.148.10.141

🇧🇷 45.71.21.166

🇫🇮 34.88.36.166

🇨🇦 34.47.33.134

🇺🇸 32.194.45.85

🇦🇺 1.123.233.171

🇺🇸 207.90.244.18

🇧🇷 205.210.31.149

🇻🇳 203.162.72.194

🇳🇱 195.178.110.228

🇨🇳 182.46.29.115

🇨🇳 180.173.167.253

🇧🇷 177.8.162.18

🇺🇸 100.29.192.51