This IP address has been reported a total of
31
times from
25 distinct
sources.
35.228.222.249 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United Kingdom of Great Britain and Northern Ireland
with 5
reports;
Netherlands
with 5
reports;
United States of America
with 4
reports.
The most common categories in these recent reports were:
Web App Attack
28
times;
Brute-Force
12
times;
Hacking
8
times;
Bad Web Bot
5
times;
Port Scan
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
251 attacks on VC URLs, PHP URLs, config grabbing URLs (type 2), env grabbing URLs:
GET /.git/config ...
show more251 attacks on VC URLs, PHP URLs, config grabbing URLs (type 2), env grabbing URLs:
GET /.git/config HTTP/1.1
GET /includes/phpinfo.php HTTP/1.1
GET /application_default_credentials.json HTTP/1.1
GET /config/app/.env HTTP/1.1
show less
Web app scan detected by fail2ban/banip: 12 requests in 0 s on 1 domain (301). Paths: /.git/config, ...
show moreWeb app scan detected by fail2ban/banip: 12 requests in 0 s on 1 domain (301). Paths: /.git/config, /.env, /.env.development (+4 more). Sample: 2026-10-16T18:18:58Z "GET /.git/config" 301
show less
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.228.222 ...
show moreMalicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.228.222.249 (FI/Finland/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 35.228.222.249 (FI/Finland/249.222.228.35.bc.googleusercontent.com): 20 in the last 3600 secs
show less
