JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.35.81

35.228.35.81 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	81.35.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.35.81

Whois 35.228.35.81

IP Abuse Reports for 35.228.35.81:

This IP address has been reported a total of 35 times from 24 distinct sources. 35.228.35.81 was first reported on September 15th 2026, and the most recent report was 13 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-09-17 02:23:57 (13 minutes ago)	[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.228.35.81 - - [17/Sep/2026:04:23:44 +0200] "GET /.git/config HTTP/2.0" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-16 17:55:03 (8 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-16 15:25:41 (11 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+2 more) \| 2026-09-16 15:25 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 14:13:14 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:13:10.578210 2026] [security2:error] [pid 12177:tid 12177] [client 35.228.35.81:60356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mentalmolecule.org.theknowledgemaster.com"] [uri "/.git/config"] [unique_id "aqqj9m_nZcgfeGJMwqxasQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MatCat	2026-09-16 14:05:12 (12 hours ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇫🇮 paissangroup	2026-09-16 13:29:24 (13 hours ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-09-16 10:35:12 (16 hours ago)	Bot / seems abusive / Apache connections: 20	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 10:29:12 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:29:05.385733 2026] [security2:error] [pid 4610:tid 4610] [client 35.228.35.81:51140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.meneerenmevrouw.boens.org"] [uri "/.git/config"] [unique_id "aqpvcUmypLMMuJSUUM7gewAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-09-16 10:29:00 (16 hours ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 09:09:19 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 05:09:12.684409 2026] [security2:error] [pid 8421:tid 8421] [client 35.228.35.81:36716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mena365.gulftelecom.com"] [uri "/.git/config"] [unique_id "aqpcuLS3ctWaQy_Qqm1aWgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 07:39:47 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:39:40.402821 2026] [security2:error] [pid 11296:tid 11296] [client 35.228.35.81:53992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.memoriesin.thinksite.net"] [uri "/.git/config"] [unique_id "aqpHvEjDer8sL5yZWCnP4QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-16 07:29:38 (19 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 04:33:07 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:33:01.261738 2026] [security2:error] [pid 11419:tid 11419] [client 35.228.35.81:34178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.members.oxfordgliding.com"] [uri "/.git/config"] [unique_id "aqob_Zc3BoID7ITCLhFufAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 04:08:37 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:08:29.540009 2026] [security2:error] [pid 4739:tid 4739] [client 35.228.35.81:55348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.members.15tobefit.com"] [uri "/.git/config"] [unique_id "aqoWPX0-PtThw5MahInyMgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 03:47:23 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.35.81 (81.35.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:47:19.341137 2026] [security2:error] [pid 1997159:tid 1997159] [client 35.228.35.81:52598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.member.ic1.biz"] [uri "/.git/config"] [unique_id "aqoRR5BP5_8Flq5YGNNjagAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.201

🇩🇪 194.187.176.215

🇺🇸 173.49.43.138

🇸🇬 172.70.142.151

🇫🇷 169.58.124.39

🇲🇾 165.154.147.69

🇮🇩 114.5.84.99

🇨🇳 112.102.223.203

🇸🇬 101.47.156.21

🇺🇸 91.230.168.213

🇺🇦 91.208.194.40

🇳🇱 91.92.42.200

🇫🇷 89.93.90.39

🇭🇰 47.242.161.215

🇺🇸 44.201.211.150

🇮🇹 34.154.81.245

🇧🇷 200.151.19.184

🇫🇷 187.14.105.198

🇬🇧 185.214.101.139

🇲🇾 175.143.73.179