This IP address has been reported a total of
11
times from
10 distinct
sources.
35.204.98.235 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
35.204.98.235 - - [15/Jun/2026:15:18:34 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gra ...
show more35.204.98.235 - - [15/Jun/2026:15:18:34 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 404 496 "-" "Mozilla/5.0 (iPad; CPU OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Mobile/15E148 Safari/604.1" ...
show less
Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ...
show moreAutomated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-json/gravitysmtp/v1/settings -> 404 UA=""; GET /wp-json/wp/v2/settings -> 404 UA=""; GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings -> 404 UA=""; GET /wp-json/gravitysmtp/v1/config -> 404 UA=""; GET /wp-json/gravitysmtp/v1/tests/mock-data -> 404 UA=""
show less
[MonJun1508:35:42.3077482026][security2:error][pid3892628:tid3892640][client35.204.98.235:0]ModSecur ...
show more[MonJun1508:35:42.3077482026][security2:error][pid3892628:tid3892640][client35.204.98.235:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"noleggi.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"ai-dPptzAPZDdmef6U__xwAAAAk\"]
show less
[SunJun1407:09:45.1738572026][security2:error][pid2210579:tid2210706][client35.204.98.235:0]ModSecur ...
show more[SunJun1407:09:45.1738572026][security2:error][pid2210579:tid2210706][client35.204.98.235:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mjgold.ch\"][uri\"/wp-json/wp/v2/settings\"][unique_id\"ai43mUyBEwXnW5YeGnwuAAAAAQk\"]
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.204.98.235 (235.98.204.35.bc.goog ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.204.98.235 (235.98.204.35.bc.googleusercontent.com): 2 in the last 3600 secs
show less