This IP address has been reported a total of
127
times from
86 distinct
sources.
35.198.85.212 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:949110) triggered by 35.198.85.212 (DE/Germany/212.85.198.35.bc.goog ...
show more(mod_security) mod_security (id:949110) triggered by 35.198.85.212 (DE/Germany/212.85.198.35.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
Anonymous
Blocked by fail2ban on a public web server.
Web App Attack
Anonymous
IP matched detection query Detection of too many failed responses.
[2026-10-21 08:59:22.774609] [authz_core:error] [pid 3753082:tid 124541815633600] [client 35.198.85. ...
show more[2026-10-21 08:59:22.774609] [authz_core:error] [pid 3753082:tid 124541815633600] [client 35.198.85.212:0] AH01630: client denied by server configuration: /var/www/*/z9x8c7v6b5-debug-trigger-* , error_notes:debug-probing , URI:'/z9x8c7v6b5-debug-trigger-*'
[2026-10-21 08:59:22.792116] [authz_core:error] [pid 3753081:tid 124541790455488] [client 35.198.85.212:0] AH01630: client denied by server configuration: /var/www/*/.vite , error_notes:config-files , URI:'/.vite/manifest.json'
[2026-10-21 08:59:22.806152] [authz_core:error] [pid 3753082:tid 124541798848192] [client 35.198.85.212:0] AH01630: client denied by server configuration: /var/www/*/lib , error_notes:missing-php , URI:'/lib/terminal-xhr.php'
[2026-10-21 08:59:22.826477] [authz_core:error] [pid 3753081:tid 124541782062784] [client 35.198.85.212:0] AH01630: client denied by server configuration: /var/www/*/build , error_notes:config-files , URI:'/build/manifest.json'
[2026-10-21 08:59:23.036218] [authz_core:error] [pid 3753082:tid 124541782062784] [cl
show less
Web App Attack
Bad Web Bot
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 35.198.85.212 (DE/Germany/212.85.198.35 ...
show more(mod_security) mod_security triggered on hostname [redacted] 35.198.85.212 (DE/Germany/212.85.198.35.bc.googleusercontent.com)
show less
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ...
show moreBAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-196)
show less
2026-10-21 01:31:50 AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env) && 2026-10-21 01:3 ...
show more2026-10-21 01:31:50 AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env) && 2026-10-21 01:31:51 AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ) && 2026-10-21 01:31:51 AH10244: invalid URI path (/public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ) && 118 more within 20 minutes
show less
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 ...
show moreTriggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (POST method)
Endpoint: /icecoder/lib/file-control.php
UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Showing 1 to
15
of 127 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩