This IP address has been reported a total of
69
times from
52 distinct
sources.
35.198.113.159 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 14
reports;
United States of America
with 14
reports;
Netherlands
with 12
reports.
The most common categories in these recent reports were:
Web App Attack
56
times;
Brute-Force
29
times;
Bad Web Bot
25
times;
Hacking
16
times;
Port Scan
6
times;
Other
16
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-12.
show less
Honeypot caught: /cgi-bin/php via dpv.saec.me. UA: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +htt ...
show moreHoneypot caught: /cgi-bin/php via dpv.saec.me. UA: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/).
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
{"level":"info","ts":1791849561.8915362,"logger":"http.log.access.log0","msg":"handled request","req ...
show more{"level":"info","ts":1791849561.8915362,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"35.198.113.159","remote_port":"52340","client_ip":"35.198.113.159","proto":"HTTP/2.0","method":"GET","host":"dq7n.status.updown.io","uri":"/.next/.env","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"],"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"dq7n.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000475978,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1791849561.8927464,"logger":"http.log.access.log0","m
...
show less
(mod_security) mod_security (id:949110) triggered by 35.198.113.159 (DE/Germany/159.113.198.35.bc.go ...
show more(mod_security) mod_security (id:949110) triggered by 35.198.113.159 (DE/Germany/159.113.198.35.bc.googleusercontent.com): N in the last X secs
show less
⛔ [13/10/26] This IP has been detected performing multiple attacks on websites (1742 attempts blocke ...
show more⛔ [13/10/26] This IP has been detected performing multiple attacks on websites (1742 attempts blocked). Potential malicious activity.
show less
Automated report: Unauthorized vulnerability scanning detected on 2026-10-12. 1490 requests from thi ...
show moreAutomated report: Unauthorized vulnerability scanning detected on 2026-10-12. 1490 requests from this IP.
show less
2026-10-12T21:40:54+01:00 NAS [Mon Oct 12 21:40:54.172994 2026] [authz_core:error] [pid 18463:tid 18 ...
show more2026-10-12T21:40:54+01:00 NAS [Mon Oct 12 21:40:54.172994 2026] [authz_core:error] [pid 18463:tid 18478] [client 35.198.113.159:54256] AH01630: client denied by server configuration: /var/services/web/.htpasswd
...
show less
Honeypot caught: //.env via config.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); ...
show moreHoneypot caught: //.env via config.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
Cloudflare WAF blocked 87 requests in 1h from DE. Top paths probed: /, /.env.local, /admin. Pattern: ...
show moreCloudflare WAF blocked 87 requests in 1h from DE. Top paths probed: /, /.env.local, /admin. Pattern: bot/scanner abuse. Auto-reported by Jarvis CF monitor.
show less
