This IP address has been reported a total of
75
times from
62 distinct
sources.
35.242.212.227 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 15
reports;
Netherlands
with 14
reports;
France
with 12
reports.
The most common categories in these recent reports were:
Web App Attack
56
times;
Brute-Force
27
times;
Bad Web Bot
23
times;
Hacking
14
times;
Exploited Host
5
times;
Other
9
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ...
show moreAutomated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-26 09:07 UTC.
show less
{"level":"info","ts":1793004705.5193892,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1793004705.5193892,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.242.212.227","remote_port":"34182","client_ip":"35.242.212.227","proto":"HTTP/2.0","method":"GET","host":"status.monitoring.sdw.ovh","uri":"/dist/manifest.json","headers":{"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Microsoft Edge\";v=\"153\", \"Not_A Brand\";v=\"8\""],"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Priority":["u=0, i"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Site":["none"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
...
show less
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show moreProbed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-10-26T07:55:03Z sensor=fail2ban role=web-canary
src=35.242.212.227
show less
Cluster member (Omitted) (US/United States/-) said, TEMPDENY 35.242.212.227, Reason:[(Suspicious) Su ...
show moreCluster member (Omitted) (US/United States/-) said, TEMPDENY 35.242.212.227, Reason:[(Suspicious) Suspicious activity detected 35.242.212.227 (DE/Germany/227.212.242.35.bc.googleusercontent.com): 10 in the last 3600 secs]
show less
