JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 35.238.41.228

35.238.41.228 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	228.41.238.35.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 35.238.41.228

Whois 35.238.41.228

IP Abuse Reports for 35.238.41.228:

This IP address has been reported a total of 37 times from 20 distinct sources. 35.238.41.228 was first reported on August 27th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-09-02 06:15:41 (1 hour ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇦🇺 clapper	2026-09-02 05:57:25 (2 hours ago)	(mod_security) mod_security (id:949110) triggered by 35.238.41.228 (US/United States/228.41.238.35.b ... show more (mod_security) mod_security (id:949110) triggered by 35.238.41.228 (US/United States/228.41.238.35.bc.googleusercontent.com): 3 in the last 3600 secs; ID: LUC show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-02 05:50:35 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:50:29.836352 2026] [security2:error] [pid 2197:tid 2197] [client 35.238.41.228:54780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lawrencehale.com"] [uri "/site/.git/config"] [unique_id "ape5JbGbZBueJjPagfIKjwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 05:20:53 (2 hours ago)	(mod_security) mod_security (id:949110) triggered by 35.238.41.228 (228.41.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:949110) triggered by 35.238.41.228 (228.41.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:20:49.610324 2026] [security2:error] [pid 10794:tid 10794] [client 35.238.41.228:39794] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.psqeng.com"] [uri "/public/.git/config"] [unique_id "apeyMa9ggntZNAP4HCU8cAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 04:58:45 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:58:39.839104 2026] [security2:error] [pid 27643:tid 27643] [client 35.238.41.228:45614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.dreamlikeitmatters.com"] [uri "/site/.git/config"] [unique_id "apes_3B-jsA-QxOkU3rXogAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-02 04:34:35 (3 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇬🇧 consul.to	2026-09-02 00:07:15 (7 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 21:22:56 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 17:22:52.129755 2026] [security2:error] [pid 952835:tid 952945] [client 35.238.41.228:56372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "noharm-nofowl.plumeraproductions.com"] [uri "/www/.git/config"] [unique_id "apdCLO1WseMz2c5t0L49AQAAANI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 19:58:54 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 15:58:46.729136 2026] [security2:error] [pid 676:tid 676] [client 35.238.41.228:39024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danialias.com"] [uri "/www/.git/config"] [unique_id "apcudj8ACGVo0BQHnj7zWQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-01 14:50:20 (17 hours ago)	Multiple WAF Violations	Web App Attack
🇸🇪 vaia.cloud	2026-09-01 14:05:02 (17 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 13:55:35 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:55:31.258641 2026] [security2:error] [pid 25515:tid 25515] [client 35.238.41.228:41094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billwegener.net"] [uri "/html/.git/config"] [unique_id "apbZU4hoG2TwYFD1PCudCwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 raph	2026-09-01 13:44:33 (18 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 12:08:05 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.238.41.228 (228.41.238.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:08:00.139907 2026] [security2:error] [pid 2029:tid 2029] [client 35.238.41.228:56192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hker.org"] [uri "/api/.git/config"] [unique_id "apbAIIOkiVZXXQ935UvunwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-09-01 12:05:10 (19 hours ago)		Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 192.144.6.107

🇮🇩 180.254.204.196

🇰🇭 175.28.0.145

🇺🇸 173.254.211.184

🇸🇬 138.2.102.66

🇨🇳 124.239.129.2

🇿🇦 105.247.89.210

🇫🇷 51.75.236.148

🇸🇬 45.82.78.103

🇯🇵 43.128.229.157

🇺🇸 20.115.57.227

🇨🇳 223.78.232.92

🇷🇺 194.85.210.244

🇺🇸 167.172.29.69

🇨🇳 121.46.239.200

🇧🇷 45.205.1.240

🇺🇸 35.245.168.15

🇬🇧 35.203.211.64

🇳🇱 2.56.10.36

🇮🇹 217.201.149.239