This IP address has been reported a total of
206
times from
144 distinct
sources.
161.35.89.142 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 27
reports;
Germany
with 21
reports;
France
with 8
reports.
The most common categories in these recent reports were:
Web App Attack
81
times;
Bad Web Bot
34
times;
Brute-Force
33
times;
Hacking
12
times;
SSH
5
times;
Other
14
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[13/Oct/2026:01:37:19 +0300] -- 161.35.89.142 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET / ...
show more[13/Oct/2026:01:37:19 +0300] -- 161.35.89.142 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.env HTTP/1.1
show less
Repeated exploit attempts, for example: /.git/config /.git/config (HTTP/2.0 port 443, user agent: "M ...
show moreRepeated exploit attempts, for example: /.git/config /.git/config (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36")
show less
Ip 161.35.89.142 performed 'crowdsecurity/CVE-2017-9841' (1 events over 0s) at 2026-10-13 08:39:15.0 ...
show moreIp 161.35.89.142 performed 'crowdsecurity/CVE-2017-9841' (1 events over 0s) at 2026-10-13 08:39:15.070316026 +0000 UTC
Ip 161.35.89.142 performed 'crowdsecurity/appsec-vpatch' (2 events over 221.725µs) at 2026-10-13 08:39:14.485223355 +0000 UTC
Ip 161.35.89.142 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-10-13 08:39:15.379809465 +0000 UTC
WAF block: crowdsecurity/vpatch-CVE-2017-9841 from 161.35.89.142 ([REDACTED]) (3 alerts)
WAF block: crowdsecurity/vpatch-env-access from 161.35.89.142 ([REDACTED]) (3 alerts)
WAF block: crowdsecurity/vpatch-git-config from 161.35.89.142 ([REDACTED]) (3 alerts)
show less
