JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.208.89

35.228.208.89 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 71%: ?

71%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	89.208.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.208.89

Whois 35.228.208.89

IP Abuse Reports for 35.228.208.89:

This IP address has been reported a total of 15 times from 15 distinct sources. 35.228.208.89 was first reported on September 14th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 03:25:26 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 35.228.208.89 (89.208.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.208.89 (89.208.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:25:18.624987 2026] [security2:error] [pid 16048:tid 16048] [client 35.228.208.89:40384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "janajjmcgraw.com"] [uri "/.git/config"] [unique_id "aqoMHlAZgzKW0Y6FGqDiiwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SLSLLC	2026-09-16 00:38:49 (1 week ago)	35.228.208.89 - - [16/Sep/2026:00:38:49 +0000] "GET /.env HTTP/2.0" 403 1881 "-" "Mozilla/5.0 (Windo ... show more 35.228.208.89 - - [16/Sep/2026:00:38:49 +0000] "GET /.env HTTP/2.0" 403 1881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇧🇷 Host One	2026-09-15 23:50:47 (1 week ago)	Directory traversal attempt against a web application (1 occurrences) (last request: /home/jamgo56/p ... show more Directory traversal attempt against a web application (1 occurrences) (last request: /home/jamgo56/public_html/httsp://www.jamg.org.br/home/jamgo56/public_html/httsp:/www.jamg.org.br/home/jamgo56/public...). Detected by log analysis on 2026-09-15 23:49:07 UTC. show less	Web App Attack Hacking
Anonymous	2026-09-15 18:04:51 (1 week ago)	Aggressive Robot or Attack DDOS	DDoS Attack
🇦🇺 rubixstudios	2026-09-15 17:34:03 (1 week ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇨🇦 Anytech	2026-09-15 15:09:51 (1 week ago)	Blocked by ConnMonitor	Web App Attack
🇩🇪 mondor.ro	2026-09-15 12:00:15 (1 week ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 35.228.208.89, Reason: ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 35.228.208.89, Reason:[(mod_security) mod_security (id:210492) triggered by 35.228.208.89 (FI/Finland/89.208.228.35.bc.googleusercontent.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
Anonymous	2026-09-15 11:21:33 (1 week ago)	(config_exploit_scan) Configuratie Scanner / Nep GPTBot 35.228.208.89 (FI/Finland/89.208.228.35.bc.g ... show more (config_exploit_scan) Configuratie Scanner / Nep GPTBot 35.228.208.89 (FI/Finland/89.208.228.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.228.208.89 - - [15/Sep/2026:13:21:27 +0200] "GET /.env HTTP/1.1" 406 518 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.208.89 - - [15/Sep/2026:13:21:27 +0200] "GET /.env.local HTTP/1.1" 406 4887 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.208.89 - - [15/Sep/2026:13:21:27 +0200] "GET /.env.production HTTP/1.1" 406 4886 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Port Scan
🇷🇴 iulianh	2026-09-15 09:36:42 (1 week ago)	80,443	Brute-Force SSH
🇺🇸 IndigoRidge	2026-09-15 08:51:30 (1 week ago)	35.228.208.89 - - [15/Sep/2026:04:51:20 -0400] "GET /.git/config HTTP/1.1" 301 4959 "-" "Mozilla/5.0 ... show more 35.228.208.89 - - [15/Sep/2026:04:51:20 -0400] "GET /.git/config HTTP/1.1" 301 4959 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.208.89 - - [15/Sep/2026:04:51:21 -0400] "GET /.env HTTP/1.1" 301 4945 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.208.89 - - [15/Sep/2026:04:51:29 -0400] "GET /app/.env HTTP/1.1" 301 4953 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 Mangelot Hosting	2026-09-15 08:35:07 (1 week ago)	(modsecurity) srv201 ModSecurity 35.228.208.89 (FI/Finland/89.208.228.35.bc.googleusercontent.com): ... show more (modsecurity) srv201 ModSecurity 35.228.208.89 (FI/Finland/89.208.228.35.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-09-15 07:25:26 (1 week ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇮🇹 clamehost.it	2026-09-15 06:11:40 (1 week ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
🇳🇱 WeCloudit-Anti-Abuse	2026-09-15 03:34:51 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-09-14 21:59:31 (1 week ago)	Auto-ban: >3000 req/min op 2026-09-14	Web App Attack SSH Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 213.35.101.27

🇳🇱 34.7.160.114

🇺🇸 216.180.246.78

🇩🇪 209.38.251.85

🇳🇱 195.178.110.3

🇩🇪 194.88.98.92

🇬🇧 193.163.125.120

🇲🇽 187.189.68.243

🇦🇷 181.10.138.162

🇸🇬 172.217.44.226

🇺🇸 172.210.9.220

🇺🇸 172.86.73.137

🇨🇳 116.148.226.140

🇺🇸 65.49.1.123

🇺🇦 46.98.61.30

🇰🇿 37.208.46.134

🇬🇧 35.203.211.236

🇺🇸 20.15.203.85

🇿🇦 16.28.84.0

🇯🇵 8.216.14.28