JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.52.12

35.228.52.12 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	12.52.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.52.12

Whois 35.228.52.12

IP Abuse Reports for 35.228.52.12:

This IP address has been reported a total of 29 times from 23 distinct sources. 35.228.52.12 was first reported on September 10th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-09-11 18:08:29 (2 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 masterguru	2026-09-11 15:29:56 (4 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 15:01:55 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.52.12 (12.52.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.52.12 (12.52.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 11:01:51.131831 2026] [security2:error] [pid 28678:tid 28678] [client 35.228.52.12:53418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.orchestrateyouraptitudes.ficklepassionproductions.com"] [uri "/.git/config"] [unique_id "aqQX3xLlpvFWcAMd9wGqDAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-11 13:19:02 (7 hours ago)	Bot / scanning and/or hacking attempts: GET /phpinfo.php HTTP/1.1, GET /i.php HTTP/1.1, GET /info.ph ... show more Bot / scanning and/or hacking attempts: GET /phpinfo.php HTTP/1.1, GET /i.php HTTP/1.1, GET /info.php HTTP/1.1, GET /admin/phpinfo.php HTTP/1.1, GET /p.php HTTP/1.1, GET /debug.php HTTP/1.1, GET /phpinfo HTTP/1.1, GET /test.php HTTP/1.1, GET /test/phpinfo.php HTTP/1.1, GET /worker/.env HTTP/1.1, GET /production/.env HTTP/1.1, GET /pinfo.php HTTP/1.1, GET /php.php HTTP/1.1, GET /config/app/.env HTTP/1.1, GET /pi.php HTTP/1.1, GET /beta/.env HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 12:40:36 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.52.12 (12.52.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.52.12 (12.52.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 08:40:28.659242 2026] [security2:error] [pid 23830:tid 23830] [client 35.228.52.12:58488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.orangecountyrehearsal.virlouise.com"] [uri "/.git/config"] [unique_id "aqP2vDtMCzw5NnqI95y8_QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-11 09:50:01 (10 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇳🇱 sernate	2026-09-11 09:12:07 (11 hours ago)	(403blocker) 403 trigger 35.228.52.12 (FI/Finland/12.52.228.35.bc.googleusercontent.com): 80 in the ... show more (403blocker) 403 trigger 35.228.52.12 (FI/Finland/12.52.228.35.bc.googleusercontent.com): 80 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force
🇩🇪 big-cloud.nl	2026-09-11 09:12:02 (11 hours ago)	Try to access /.git/config	Web App Attack
🇩🇪 Séfora Srl	2026-09-11 08:43:33 (11 hours ago)	crowdsecurity/http-sensitive-files detected by CrowdSec	Web App Attack
🇩🇪 EGP Abuse Dept	2026-09-11 07:22:11 (13 hours ago)	Scanning for web/db/file exploits on www.opticien-maarssen.nl	SQL Injection Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-09-11 05:58:49 (14 hours ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 05:23:01 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.52.12 (12.52.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 35.228.52.12 (12.52.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 01:22:54.060665 2026] [security2:error] [pid 26268:tid 26268] [client 35.228.52.12:52182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oposicionesyconcursos.es.creartest.com"] [uri "/.git/config"] [unique_id "aqOQLkY_dx_r4wa6Fq5GcwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-11 05:20:27 (15 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-09-11 05:13:32 (15 hours ago)	251 attacks on PHP URLs, VC URLs, config grabbing URLs (type 2), env grabbing URLs: GET /includes/ph ... show more 251 attacks on PHP URLs, VC URLs, config grabbing URLs (type 2), env grabbing URLs: GET /includes/phpinfo.php HTTP/1.1 GET /.git/config HTTP/1.1 GET /application_default_credentials.json HTTP/1.1 GET /config/app/.env HTTP/1.1 show less	Web App Attack Hacking
🇧🇪 cmbplf	2026-09-11 05:01:25 (15 hours ago)	16.055 requests in 1 hour (1mo3w1d)	Brute-Force Bad Web Bot

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.81.209.153

🇺🇸 104.131.55.126

🇲🇲 103.59.163.132

🇫🇷 85.217.140.40

🇷🇺 83.169.241.21

🇺🇸 74.125.182.94

🇫🇷 2001:41d0:33d:9200::40c

🇰🇷 222.110.147.56

🇺🇸 195.184.76.175

🇺🇸 162.241.91.148

🇨🇳 106.63.26.22

🇱🇹 77.90.185.107

🇩🇪 69.5.169.251

🇲🇵 8.3.123.71

🇭🇰 183.178.50.130

🇧🇬 91.92.199.36

🇮🇷 78.38.96.176

🇺🇸 52.176.211.73

🇰🇷 39.120.34.60

🇺🇸 20.121.56.49