JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.3.106

35.228.3.106 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 78%: ?

78%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	106.3.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.3.106

Whois 35.228.3.106

IP Abuse Reports for 35.228.3.106:

This IP address has been reported a total of 17 times from 14 distinct sources. 35.228.3.106 was first reported on September 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-09-16 08:05:14 (1 day ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 Alt255	2026-09-15 19:22:07 (1 day ago)	[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.228.3.106 - - [15/Sep/2026:21:22:06 +0200] "GET /.git/config HTTP/1.1" 404 101865 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 19:13:04 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.228.3.106 (106.3.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.3.106 (106.3.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:12:58.193144 2026] [security2:error] [pid 16565:tid 16565] [client 35.228.3.106:37208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrpinman.org"] [uri "/.git/config"] [unique_id "aqmYumPuhtA6B9yJ9kT8ogAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 dot.mg	2026-09-15 18:44:44 (2 days ago)	Scan of vulnerable files	Web App Attack
🇺🇸 aks4226	2026-09-15 18:29:57 (2 days ago)	Bot search, attacking common web applications.	Web App Attack
🇸🇪 vaia.cloud	2026-09-15 16:45:02 (2 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇫🇮 oh.mg	2026-09-15 16:23:27 (2 days ago)	[Tue Sep 15 18:23:26.547205 2026] [security2:error] [pid 415557:tid 415575] [client 35.228.3.106:0] ... show more [Tue Sep 15 18:23:26.547205 2026] [security2:error] [pid 415557:tid 415575] [client 35.228.3.106:0] [client 35.228.3.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "eu.mmn.ca"] [uri "/"] [unique_id "aqlw_qDQ7-NK9ShDtK7QjgAAAM8"] [Tue Sep 15 18:23:26.648933 2026] [security2:error] [pid 415557:tid 415567] [client 35.228.3.106:0] [client 35.228.3.106] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [ ... show less	Web App Attack Bad Web Bot
🇩🇪 verlon	2026-09-15 16:11:18 (2 days ago)	2026/09/15 18:11:11 [error] 583075#583075: 97745 access forbidden by rule, client: 35.228.3.106, se ... show more 2026/09/15 18:11:11 [error] 583075#583075: 97745 access forbidden by rule, client: 35.228.3.106, server: gcomfort.hu, request: "GET /.git/config HTTP/2.0", host: "gcomfort.hu" 2026/09/15 18:11:14 [error] 583075#583075: 97745 access forbidden by rule, client: 35.228.3.106, server: gcomfort.hu, request: "GET /.env.bak HTTP/2.0", host: "gcomfort.hu" 2026/09/15 18:11:14 [error] 583075#583075: 97745 access forbidden by rule, client: 35.228.3.106, server: gcomfort.hu, request: "GET /.env.save HTTP/2.0", host: "gcomfort.hu" ... show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-09-15 16:02:20 (2 days ago)	Try to access /.git/config	Web App Attack
🇳🇱 middelkoopcc	2026-09-15 13:28:07 (2 days ago)	2026-09-15 15:26:03 GET /.git/config [301] && 2026-09-15 15:26:03 GET /.env [301] && 2026-09-15 15:2 ... show more 2026-09-15 15:26:03 GET /.git/config [301] && 2026-09-15 15:26:03 GET /.env [301] && 2026-09-15 15:26:04 GET /.env.bak [301] && 140 more within 20 minutes show less	Web App Attack
🇺🇸 nyt	2026-09-15 13:12:43 (2 days ago)	Sensitive File Probe	Web App Attack
🇳🇱 Savvii	2026-09-15 13:07:45 (2 days ago)	117 attempts against mh_ha-misbehave-ban on tin	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-15 12:20:03 (2 days ago)	Bot / scanning and/or hacking attempts: GET /.env.dev HTTP/1.1, GET /.env.development HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /.env.dev HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.git/config HTTP/1.1, POST / HTTP/1.1, GET /index.php HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 consul.to	2026-09-15 09:50:07 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-09-15 06:07:09 (2 days ago)	Excessive 404/403 errors	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 196.251.121.220

🇭🇰 2602:80d:1004::19

🇺🇸 205.210.31.79

🇷🇺 178.178.194.192

🇬🇭 154.163.188.127

🇧🇷 138.122.242.42

🇩🇪 118.193.58.125

🇺🇸 173.168.117.109

🇩🇪 150.251.37.123

🇨🇳 125.69.144.2

🇳🇱 77.239.124.204

🇺🇸 34.16.162.214

🇸🇬 15.235.148.66

🇳🇱 188.166.29.60

🇱🇹 62.60.130.242

🇸🇬 47.79.206.39

🇷🇺 46.20.71.68

🇭🇰 45.138.12.11

🇧🇪 34.62.82.165

🇮🇹 2a03:2880:f16d:88:face:b00c:0:79f4