JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.26.28

35.228.26.28 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 73%: ?

73%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	28.26.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.26.28

Whois 35.228.26.28

IP Abuse Reports for 35.228.26.28:

This IP address has been reported a total of 14 times from 12 distinct sources. 35.228.26.28 was first reported on September 15th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 miszterx.hu	2026-09-16 08:46:51 (2 days ago)	XORP (haproxy): 139x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_i ... show more XORP (haproxy): 139x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu) show less	Web App Attack
🇳🇱 Site.eu	2026-09-16 02:53:06 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 ✨	2026-09-16 01:16:17 (2 days ago)	Domain : knockinhall.co.uk Rule : hack 2026-09-16 01:14:50 *hidden-privacy* GET /.env.bak - 443 ... show more Domain : knockinhall.co.uk Rule : hack 2026-09-16 01:14:50 *hidden-privacy* GET /.env.bak - 443 - 35.228.26.28 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - knockinhall.co.uk 404 0 2 12898 298 40 - - show less	Hacking SQL Injection Brute-Force
🇳🇱 homeshowdomain.nl	2026-09-15 22:03:24 (2 days ago)	Auto-ban: >3000 req/min op 2026-09-15	Web App Attack SSH Hacking
🇮🇹 CoreTech srl	2026-09-15 19:07:19 (2 days ago)	cloudlinux2 fail2ban: 2026-09-15 20:59:07,022 fail2ban.filter [1908]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-15 20:59:07,022 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 66.9.168.10 - 2026-09-15 20:59:06cloudlinux2 fail2ban: 2026-09-15 21:00:20,641 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 66.9.168.10 - 2026-09-15 21:00:20cloudlinux2 fail2ban: 2026-09-15 21:00:20,801 fail2ban.filter [1908]: INFO [recidive] Found 66.9.168.10 - 2026-09-15 21:00:20cloudlinux2 fail2ban: 2026-09-15 21:00:20,795 fail2ban.actions [1908]: NOTICE [plesk-modsecurity] Ban 66.9.168.10cloudlinux2 fail2ban: 2026-09-15 21:01:01,017 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 35.228.26.28 - 2026-09-15 21:01:01cloudlinux2 fail2ban: 2026-09-15 21:01:00,745 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 35.228.26.28 - 2026-09-15 21:01:00cloudlinux2 fail2ban: 2026-09-15 21:01:00,894 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 35.228.26.28 - 2026-09-15 21:01:00cloudlinux2 fail2ban: 2026-09-15 21:01: show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-15 16:07:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.228.26.28 (28.26.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.26.28 (28.26.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 12:07:54.462809 2026] [security2:error] [pid 1704:tid 1704] [client 35.228.26.28:36100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lahamcustomwoods.com"] [uri "/.git/config"] [unique_id "aqltWnoqZ_dTinldGeT0EwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 15:16:08 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.228.26.28 (28.26.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.26.28 (28.26.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 11:16:01.878731 2026] [security2:error] [pid 13031:tid 13031] [client 35.228.26.28:56698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lahaciendaolivia.com"] [uri "/.git/config"] [unique_id "aqlhMZdGbbvsMPKMUVW1eAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-15 11:16:17 (3 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇫🇷 dynamix	2026-09-15 10:31:50 (3 days ago)	Multiple WAF Violations	Web App Attack
🇫🇷 masterguru	2026-09-15 10:15:13 (3 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇮🇹 VHosting	2026-09-15 09:35:03 (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 Charlesiv	2026-09-15 06:01:52 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /webroot/index.php/_environment Timestamp: 2026-09-15T04:51:45Z Ray ID: a3b5049e69ca5571 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 Savvii	2026-09-15 05:20:26 (3 days ago)	20 attempts against mh-misbehave-ban on hosting	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-15 02:44:45 (3 days ago)	20 attempts against mh-misbehave-ban on hostbillst3	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇽🇰 185.188.217.196

🇧🇩 160.191.115.100

🇨🇳 116.179.37.205

🇹🇳 102.157.187.177

🇸🇬 101.47.15.26

🇨🇦 85.217.149.63

🇺🇸 70.183.236.95

🇺🇸 70.169.21.167

🇸🇬 47.79.205.253

🇺🇸 40.124.82.37

🇩🇪 5.175.206.118

🇨🇳 221.131.43.218

🇺🇸 209.145.54.117

🇧🇷 189.4.10.9

🇩🇪 167.94.146.35

🇺🇸 158.46.220.204

🇮🇳 103.177.204.4

🇬🇧 81.19.219.221

🇯🇲 72.27.125.190

🇴🇲 5.37.186.22