This IP address has been reported a total of
15
times from
12 distinct
sources.
35.204.151.122 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 4
reports;
Germany
with 3
reports;
France
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
12
times;
Bad Web Bot
8
times;
Brute-Force
6
times;
Hacking
4
times;
DDoS Attack
2
times;
Other
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show moreThis address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /public/.claude/credentials.json | 2026-09-24 06:35 UTC
show less
{"level":"info","ts":1790209768.3247619,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1790209768.3247619,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.204.151.122","remote_port":"47248","client_ip":"35.204.151.122","proto":"HTTP/1.1","method":"GET","host":"baupdate.yupdate.qponmlkjihknmlkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/app/.claude/credentials.json","headers":{"User-Agent":["crusader-worker/1.0"],"Accept":["*/*"]}},"bytes_read":0,"user_id":"","duration":0.000079322,"size":0,"status":308,"resp_headers":{"Location":["https://baupdate.yupdate.qponmlkjihknmlkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/app/.claude/credentials.json"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}}
{"level":"info","ts":1790209768.3373907,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.204.151.122","remote_port":"47254","client_ip":"35.204.151.122","proto":"HTTP/1.1","method":"GET","host":"baupdate.yupdate.qponmlkjihknmlkj
...
show less
[22/Sep/2026:10:02:27 +0300] -- 35.204.151.122 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more[22/Sep/2026:10:02:27 +0300] -- 35.204.151.122 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.claude/settings.json HTTP/1.1
show less
Bad Web Bot
Web App Attack
Showing 1 to
15
of 15 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
