JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.4.71

35.228.4.71 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 91%: ?

91%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	71.4.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.4.71

Whois 35.228.4.71

IP Abuse Reports for 35.228.4.71:

This IP address has been reported a total of 21 times from 15 distinct sources. 35.228.4.71 was first reported on August 30th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-31 16:23:29 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 12:23:25.604600 2026] [security2:error] [pid 2891:tid 2891] [client 35.228.4.71:51482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pawzy.app.lucid-events.com"] [uri "/.git/config"] [unique_id "apWqfSJcvOWy-0tcazHOhAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 14:52:01 (4 hours ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-31 14:15:39 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:15:33.692870 2026] [security2:error] [pid 614:tid 614] [client 35.228.4.71:49770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paulzaremba.com.growtowork.com"] [uri "/.git/config"] [unique_id "apWMhQeTHwx97X5IhYZmawAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 13:49:09 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:49:02.860364 2026] [security2:error] [pid 30587:tid 30587] [client 35.228.4.71:57860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paulomiranda.infinite-e.com"] [uri "/.git/config"] [unique_id "apWGTg7rOdKfQXbUKYvSKAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 xyz.rip	2026-08-31 13:06:50 (5 hours ago)	WAF Violation ...	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 11:46:32 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:46:27.319238 2026] [security2:error] [pid 2761:tid 2761] [client 35.228.4.71:53460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.patterson.jamesallenwalker.com"] [uri "/.git/config"] [unique_id "apVpk-0eq5ahQXMKK9mlZAAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 10:30:35 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 35.228.4.71 (71.4.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:30:29.218714 2026] [security2:error] [pid 26493:tid 26493] [client 35.228.4.71:57392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.patrick.grimone.com"] [uri "/.git/config"] [unique_id "apVXxQrjXNio0THjernKRgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-31 07:25:41 (11 hours ago)	Excessive multi-domain requests	Brute-Force
🇦🇺 screwlooseit.com.au	2026-08-31 06:51:50 (12 hours ago)	Blocked by CSF 13 firewall - Rule: config-dotfile 71.4.228.35.bc.googleusercontent.com	Web App Attack
🇫🇷 LRob	2026-08-31 06:06:02 (12 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /.git/config \| 2026-08-31 06:06 UTC show less	Hacking Web App Attack
🇮🇩 Burayot	2026-08-31 05:50:51 (13 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.228.4.71 (FI/Finland/71.4.228.35. ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.228.4.71 (FI/Finland/71.4.228.35.bc.googleusercontent.com): 2 in the last 3600 secs show less	Web App Attack
🇦🇹 mindrider	2026-08-31 05:43:50 (13 hours ago)	35.228.4.71 - - [31/Aug/2026:07:43:49 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 ( ... show more 35.228.4.71 - - [31/Aug/2026:07:43:49 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 35.228.4.71 - - [31/Aug/2026:07:43:50 +0200] "GET /.env.local HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" ... show less	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-08-31 05:37:31 (13 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇮🇹 VHosting	2026-08-31 05:35:04 (13 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 MM-bot	2026-08-31 04:53:08 (14 hours ago)	URL-probe: HTTP/1.1 GET request on /.git/config (2026-08-31 06:53:08 UTC+2)	Web App Attack Hacking

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c72::12a

🇺🇸 216.73.216.68

🇨🇳 116.230.222.67

🇦🇿 31.171.66.129

🇧🇪 35.233.116.10

🇺🇸 198.74.58.148

🇺🇸 198.2.130.175

🇭🇰 162.158.114.235

🇺🇸 71.227.205.95

🇺🇸 71.73.33.119

🇺🇸 20.106.36.9

🇺🇸 207.90.244.2

🇧🇩 144.79.249.123

🇨🇳 123.178.210.233

🇨🇳 120.48.110.204

🇺🇸 66.132.172.45

🇧🇪 35.189.215.128

🇺🇸 4.148.1.89

🇨🇦 153.68.213.202

🇩🇪 69.5.169.30