JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.228.85.141

35.228.85.141 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 99%: ?

99%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	141.85.228.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.228.85.141

Whois 35.228.85.141

IP Abuse Reports for 35.228.85.141:

This IP address has been reported a total of 27 times from 17 distinct sources. 35.228.85.141 was first reported on September 15th 2026, and the most recent report was 57 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 16:24:25 (57 minutes ago)	(mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:24:17.842704 2026] [security2:error] [pid 20028:tid 20028] [client 35.228.85.141:35206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mgiexperience.digitalracemedia.com"] [uri "/.git/config"] [unique_id "aqrCsU-NGvamQy94N-shzgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-16 15:20:17 (2 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 15:01:03 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:00:55.071785 2026] [security2:error] [pid 12478:tid 12478] [client 35.228.85.141:44020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mexicanfriedicecreammix.lemontreefoods.com"] [uri "/.git/config"] [unique_id "aqqvJzLcdguJJsWLGiZzFgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2026-09-16 14:06:21 (3 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 LRob	2026-09-16 13:06:27 (4 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+10 more) \| 2026-09-16 13:06 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 12:47:14 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:47:09.965424 2026] [security2:error] [pid 10491:tid 10498] [client 35.228.85.141:33568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.metaphysicalinstitute.com.aafm.us"] [uri "/.git/config"] [unique_id "aqqPzbjpx3e8nllIb1dUowAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-16 11:05:02 (6 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 10:25:40 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:25:35.105421 2026] [security2:error] [pid 19806:tid 19806] [client 35.228.85.141:55566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mobile.hatfulofrain.com"] [uri "/.git/config"] [unique_id "aqpun44Dh3lXE6suw-951QAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-09-16 09:25:13 (7 hours ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 dynamix	2026-09-16 09:06:42 (8 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 07:54:30 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.228.85.141 (141.85.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:54:27.188967 2026] [security2:error] [pid 23306:tid 23306] [client 35.228.85.141:58310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.moanddoyle.michaelprussin.com"] [uri "/.git/config"] [unique_id "aqpLMzSOrdVxKLbwz1z06AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-16 04:37:32 (12 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 ger-stg-sifi1	2026-09-16 04:17:30 (13 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇮 oh.mg	2026-09-16 03:05:39 (14 hours ago)	35.228.85.141 - - [16/Sep/2026:05:05:38 +0200] "POST / HTTP/1.1" 403 500 "-" "Mozilla/5.0 (Windows N ... show more 35.228.85.141 - - [16/Sep/2026:05:05:38 +0200] "POST / HTTP/1.1" 403 500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.85.141 - - [16/Sep/2026:05:05:38 +0200] "POST / HTTP/1.1" 403 498 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.85.141 - - [16/Sep/2026:05:05:38 +0200] "POST / HTTP/1.1" 403 500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.85.141 - - [16/Sep/2026:05:05:38 +0200] "POST / HTTP/1.1" 403 498 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.228.85.141 - - [16/Sep/2026:05:05:38 +0200] "POST / HTTP/1.1" 403 500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-09-16 02:10:45 (15 hours ago)	Scanning for web/db/file exploits on www.mmgshop.nl	SQL Injection Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 34.154.199.233

🇸🇬 8.222.142.121

🇫🇷 207.180.210.81

🇨🇳 202.46.62.3

🇨🇱 190.162.160.57

🇺🇸 181.41.215.76

🇫🇷 85.217.140.18

🇷🇴 2.57.122.238

🇹🇷 195.142.175.196

🇭🇺 188.157.156.160

🇫🇷 173.249.33.72

🇧🇩 163.61.138.27

🇰🇪 102.0.10.24

🇦🇺 59.102.36.8

🇧🇷 153.67.111.213

🇨🇳 111.170.210.196

🇫🇷 104.165.104.183

🇫🇷 85.217.140.12

🇺🇸 70.167.234.160

🇵🇱 2.27.27.78