JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.27.113

35.228.27.113 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	113.27.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.27.113

Whois 35.228.27.113

IP Abuse Reports for 35.228.27.113:

This IP address has been reported a total of 42 times from 25 distinct sources. 35.228.27.113 was first reported on June 26th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-18 06:00:02 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 openstrike.co.uk	2026-09-18 05:14:04 (1 day ago)	251 attacks on VC URLs, env grabbing URLs, PHP URLs, config grabbing URLs (type 2): GET /.git/config ... show more 251 attacks on VC URLs, env grabbing URLs, PHP URLs, config grabbing URLs (type 2): GET /.git/config HTTP/1.1 GET /config/app/.env HTTP/1.1 GET /includes/phpinfo.php HTTP/1.1 GET /application_default_credentials.json HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 consul.to	2026-09-17 08:32:58 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 openstrike.co.uk	2026-09-17 05:13:39 (2 days ago)	251 attacks on VC URLs, env grabbing URLs, config grabbing URLs (type 2), PHP URLs: GET /.git/config ... show more 251 attacks on VC URLs, env grabbing URLs, config grabbing URLs (type 2), PHP URLs: GET /.git/config HTTP/1.1 GET /config/app/.env HTTP/1.1 GET /application_default_credentials.json HTTP/1.1 GET /includes/phpinfo.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 04:23:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 00:23:29.624321 2026] [security2:error] [pid 26875:tid 26875] [client 35.228.27.113:32870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.moonfamilies.seizetheseason.com"] [uri "/.git/config"] [unique_id "aqtrQSYQ8ONZS78QeA5SDAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-09-17 02:51:15 (2 days ago)	35.228.27.113 - - [17/Sep/2026:02:50:23 +0000] "POST / HTTP/1.1" 403 29007 "-" "Mozilla/5.0 (X11; Li ... show more 35.228.27.113 - - [17/Sep/2026:02:50:23 +0000] "POST / HTTP/1.1" 403 29007 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.228.27.113" 35.228.27.113 - - [17/Sep/2026:02:50:23 +0000] "POST / HTTP/1.1" 403 29007 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.228.27.113" 35.228.27.113 - - [17/Sep/2026:02:50:24 +0000] "GET /.git/config HTTP/1.1" 403 17877 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.228.27.113" 35.228.27.113 - - [17/Sep/2026:02:50:25 +0000] "GET /.env HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.228.27.113" 35.228.27.113 - - [17/Sep/2026:02:50:25 +0000] "GET /.env.local HTTP/1.1" 403 17877 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 02:46:18 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:46:11.833047 2026] [security2:error] [pid 926:tid 926] [client 35.228.27.113:60374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.monmouthcountydanceclasses.com.leonardodecaprio.com"] [uri "/.git/config"] [unique_id "aqtUc2-ErQ3WXsVxKVBkWgAAACY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-17 02:24:44 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob	2026-09-17 02:11:53 (2 days ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config \| 2026-09-17 02:11 UTC show less	Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-16 22:02:11 (2 days ago)	Auto-ban: >3000 req/min op 2026-09-16	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-09-16 17:39:28 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:39:20.348958 2026] [security2:error] [pid 7355:tid 7355] [client 35.228.27.113:55804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mantarparke.chevronparkett.com"] [uri "/.git/config"] [unique_id "aqrUSF2T2OeU31pY2wQ68AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 17:03:20 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:03:13.340369 2026] [security2:error] [pid 20556:tid 20556] [client 35.228.27.113:55356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.manninglandservices.soviaenterprises.com"] [uri "/.git/config"] [unique_id "aqrL0al802tZZvYgAxNEtQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-16 17:00:36 (3 days ago)	[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.228.27.113 - - [16/Sep/2026:19:00:20 +0200] "GET /.git/config HTTP/1.1" 404 1350 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-16 16:56:33 (3 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 15:52:28 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.27.113 (113.27.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:52:20.754215 2026] [security2:error] [pid 27042:tid 27042] [client 35.228.27.113:50664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mangamaster.hongkonger.org"] [uri "/.git/config"] [unique_id "aqq7NJnjXc7AfASPi8h6TwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 185.189.39.13

🇪🇪 95.85.245.227

🇸🇬 47.84.137.6

🇺🇸 34.128.172.90

🇬🇪 194.31.8.12

🇺🇸 172.180.64.112

🇺🇸 104.198.172.109

🇫🇷 85.217.140.47

🇺🇸 66.132.186.199

🇩🇪 47.254.134.251

🇵🇰 223.123.65.54

🇺🇸 185.191.171.18

🇺🇸 156.232.13.218

🇺🇸 130.250.189.162

🇹🇭 125.25.82.223

🇨🇳 121.229.9.110

🇨🇳 111.26.95.126

🇧🇬 109.160.32.204

🇮🇩 103.93.160.210

🇺🇸 100.37.162.117