JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.34.161

35.228.34.161 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	161.34.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.34.161

Whois 35.228.34.161

IP Abuse Reports for 35.228.34.161:

This IP address has been reported a total of 30 times from 24 distinct sources. 35.228.34.161 was first reported on October 15th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 lindi	2026-10-17 10:44:02 (6 hours ago)	Probing for resource vulnerabilities ...	Web Spam Brute-Force Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-10-17 09:45:02 (7 hours ago)	suspicious request in access.log	Web App Attack
Anonymous	2026-10-17 09:24:29 (7 hours ago)	FortiWeb WAF: 59 attacks detected. Threat Score: 6000. Types: Block IP List(30), Client Management(2 ... show more FortiWeb WAF: 59 attacks detected. Threat Score: 6000. Types: Block IP List(30), Client Management(29). Origin: Finland. show less	Web App Attack
🇷🇴 iulianh	2026-10-16 22:56:52 (18 hours ago)	80,443	Brute-Force SSH
🇳🇱 Alt255	2026-10-16 22:45:03 (18 hours ago)	[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.228.34.161 - - [17/Oct/2026:00:45:02 +0200] "GET /.git/config HTTP/1.1" 200 2828 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-16 22:09:51 (19 hours ago)	Automated abuse report by SpeedIT Security Team	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2026-10-16 22:02:03 (19 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-15. show less	Web App Attack SSH Hacking
🇩🇪 konseptit	2026-10-16 19:35:46 (21 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 35.228.34.161 (FI/Finland/161.34.228.35 ... show more (mod_security) mod_security triggered on hostname [redacted] 35.228.34.161 (FI/Finland/161.34.228.35.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-10-16 17:18:53 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.228.34.161 (161.34.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.34.161 (161.34.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:18:44.836594 2026] [security2:error] [pid 4086:tid 4086] [client 35.228.34.161:58332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.northstar-village.org"] [uri "/.git/config"] [unique_id "atJcdBuVnhXtdtLGEp2RZQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 14:21:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.228.34.161 (161.34.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.34.161 (161.34.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:20:59.161791 2026] [security2:error] [pid 16955:tid 16955] [client 35.228.34.161:46136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.northernlightsbev.printorganic.com"] [uri "/.git/config"] [unique_id "atIyy3SwBr6lA8vLAZc4FAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-10-16 12:04:26 (1 day ago)	Repeated exploit attempts, for example: /.env.production /.env (HTTP/1.1 port 443, user agent: "Mozi ... show more Repeated exploit attempts, for example: /.env.production /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36") show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 10:46:14 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 35.228.34.161 (161.34.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.34.161 (161.34.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:46:07.395255 2026] [security2:error] [pid 27677:tid 27677] [client 35.228.34.161:47964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.normsrotorservice.com.rotorservice.com"] [uri "/.git/config"] [unique_id "atIAb71wMroTHYVVjkbNRwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Sergio de Souza Pascali	2026-10-16 09:51:37 (1 day ago)	Automated web probing/attacks (blocked requests and sensitive-path scans) against www.norluz.com.br	Web App Attack Bad Web Bot Brute-Force
🇩🇪 EGP Abuse Dept	2026-10-16 09:16:03 (1 day ago)	Scanning for web/db/file exploits on www.norge.nl	SQL Injection Bad Web Bot Web App Attack
Anonymous	2026-10-16 09:13:22 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FI, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FI, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.103.14.205

🇻🇳 171.243.150.48

🇭🇰 154.92.2.59

🇺🇸 152.53.81.27

🇺🇸 138.124.123.228

🇻🇳 103.159.54.61

🇭🇰 49.213.6.30

🇺🇸 44.220.185.75

🇩🇪 23.132.164.170

🇦🇺 20.211.27.190

🇦🇺 1.159.54.33

🇷🇺 194.15.59.41

🇺🇸 69.124.251.147

🇬🇧 35.203.210.44

🇻🇳 14.225.220.240

🇻🇳 210.211.127.114

🇩🇿 197.140.9.196

🇮🇳 182.70.63.221

🇹🇷 178.18.206.247

🇮🇳 125.20.225.190