This IP address has been reported a total of
60
times from
44 distinct
sources.
35.198.48.204 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 20
reports;
France
with 9
reports;
Germany
with 8
reports.
The most common categories in these recent reports were:
Web App Attack
47
times;
Bad Web Bot
30
times;
Brute-Force
20
times;
Hacking
7
times;
Port Scan
4
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"ClientAddr":"35.198.48.204:50706","ClientHost":"35.198.48.204","ClientPort":"50706","ClientUsernam ...
show more{"ClientAddr":"35.198.48.204:50706","ClientHost":"35.198.48.204","ClientPort":"50706","ClientUsername":"-","DownstreamContentSize":1488,"DownstreamStatus":404,"Duration":74383811,"OriginContentSize":1488,"OriginDuration":74271925,"OriginStatus":404,"Overhead":111886,"RequestAddr":"vdkln.com","RequestContentSize":0,"RequestCount":15060,"RequestHost":"vdkln.com","RequestMethod":"GET","RequestPath":"/userfiles?path=../../../.env","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"vdkln-shlink-shortlinks@file","ServiceAddr":"shlink:8080","ServiceName":"shlink-svc@file","ServiceURL":"http://shlink:8080","StartLocal":"2026-10-07T01:46:52.190804943Z","StartUTC":"2026-10-07T01:46:52.190804943Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-10-07T01:46:52Z"}
{"ClientAddr":"35.198.48.204:50706","ClientHost":"35.198.48.204","ClientPort":"50706","ClientUsername":"-","Down
...
show less
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/firebase-admin.j ...
show more[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/firebase-admin.json via rule: /config
show less
