JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.8.222

35.228.8.222 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 72%: ?

72%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	222.8.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.8.222

Whois 35.228.8.222

IP Abuse Reports for 35.228.8.222:

This IP address has been reported a total of 14 times from 12 distinct sources. 35.228.8.222 was first reported on June 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 alpha	2026-06-11 02:39:48 (1 day ago)	Automated honeypot: scanner probed decoy URL on cdn.aldorand.fr (honeypot decoy)	Bad Web Bot Web App Attack
🇫🇷 alpha	2026-06-10 02:37:36 (2 days ago)	Automated honeypot: scanner probed decoy URL on cdn.aldorand.fr (honeypot decoy)	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-09 00:13:41 (4 days ago)	Too many Status 40X (11) Scanning/Probing (61) Request Overload (383)	Brute-Force Web App Attack
🇯🇵 beon	2026-06-08 16:29:35 (4 days ago)	[DateTime=>2026-06-08T16:29:35Z to 2026-06-08T16:29:42Z (UTC)] , [HoneyPot_Hits=>143 times] , [Honey ... show more [DateTime=>2026-06-08T16:29:35Z to 2026-06-08T16:29:42Z (UTC)] , [HoneyPot_Hits=>143 times] , [HoneyPots=>/actuator/configprops, /configprops, /api/actuator/configprops, /api/configprops, /app/actuator/configprops, /v1/actuator/configprops and others] , [404targets=>/actuator/threaddump, /actuator/dump, /env, /actuator/httptrace, /dump, /trace and others] , [total_Hits=>383 times] , [hit_per_second=>54.71] , [Keyword=>WordPress] show less	Bad Web Bot Web App Attack Hacking
🇪🇸 NB.INFRA	2026-06-08 15:14:15 (4 days ago)	35.228.8.222 - - [08/Jun/2026:15:14:15 +0000] "GET /backup.sql HTTP/1.1" 404 3515 "-" "Mozilla/5.0 ( ... show more 35.228.8.222 - - [08/Jun/2026:15:14:15 +0000] "GET /backup.sql HTTP/1.1" 404 3515 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0a2) Gecko/20110622 Firefox/6.0a2" 35.228.8.222 - - [08/Jun/2026:15:14:15 +0000] "GET /dump.sql HTTP/1.1" 404 3515 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 35.228.8.222 - - [08/Jun/2026:15:14:15 +0000] "GET /mysqldump.sql HTTP/1.1" 404 3515 "-" "SAMSUNG-S8000/S8000XXIF3 SHP/VPP/R5 Jasmine/1.0 Nextreaming SMM-MMS/1.2.0 profile/MIDP-2.1 configuration/CLDC-1.1 FirePHP/0.3" ... show less	Web App Attack
🇨🇭 backslash	2026-06-08 14:21:04 (4 days ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇺🇸 nyt	2026-06-08 11:44:37 (4 days ago)	404 flood (16/60s)	Bad Web Bot Web App Attack
🇫🇷 alpha	2026-06-08 11:42:33 (4 days ago)	Automated honeypot: scanner probed decoy URL on cdn.aldorand.fr (/actuator/dump)	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 10:31:48 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 35.228.8.222 (222.8.228.35.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 35.228.8.222 (222.8.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 06:31:42.379977 2026] [security2:error] [pid 816:tid 816] [client 35.228.8.222:41676] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.cthog.z-mgmt.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cthog.z-mgmt.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiaaDqRkebtgXF2aO3T2yQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-08 10:04:51 (4 days ago)	Multiple WAF Violations	Web App Attack
🇫🇮 6kilowatti	2026-06-08 09:25:20 (4 days ago)	35.228.8.222 - - [08/Jun/2026:12:25:19 +0300] "GET /.aws/credentials HTTP/1.1" 404 5937 "-" "Mozilla ... show more 35.228.8.222 - - [08/Jun/2026:12:25:19 +0300] "GET /.aws/credentials HTTP/1.1" 404 5937 "-" "Mozilla/5.0 (X11; U; NetBSD amd64; en-US; rv:1.9.2.15) Gecko/20110308 Namoroka/3.6.15" ... show less	Web App Attack
🇳🇱 Site.eu	2026-06-08 06:12:32 (4 days ago)	Excessive 404/403 errors	Brute-Force
🇮🇹 VHosting	2026-06-08 03:55:04 (4 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 Cloud86 B.V.	2026-06-08 00:26:07 (5 days ago)	categories: DDoS Attack	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.173.74

🇺🇸 165.154.135.215

🇺🇸 147.185.132.150

🇺🇸 145.223.7.39

🇺🇸 109.105.209.104

🇷🇺 93.183.83.145

🇱🇹 81.30.98.142

🇷🇴 80.94.92.70

🇷🇴 2.57.121.25

🇨🇳 218.22.72.30

🇺🇦 185.209.56.169

🇺🇸 172.190.13.234

🇸🇬 152.42.190.92

🇮🇳 106.210.255.148

🇷🇺 94.190.112.252

🇷🇺 81.89.70.180

🇷🇺 80.234.106.132

🇷🇴 80.94.92.171

🇺🇸 63.135.161.138

🇷🇺 46.39.254.221