This IP address has been reported a total of
34
times from
27 distinct
sources.
35.245.5.122 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 12
reports;
Germany
with 10
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
22
times;
Hacking
10
times;
Bad Web Bot
8
times;
Brute-Force
8
times;
SQL Injection
3
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-14.
show less
(badbots) Bad bot user-agent [redacted] from 35.245.5.122 (US/United States/122.5.245.35.bc.googleus ...
show more(badbots) Bad bot user-agent [redacted] from 35.245.5.122 (US/United States/122.5.245.35.bc.googleusercontent.com)
show less
Aggressive web search of vulnerable pages: /api/fs/read?allowOutsideWorkspace=true&path=/app/.env /a ...
show moreAggressive web search of vulnerable pages: /api/fs/read?allowOutsideWorkspace=true&path=/app/.env /api/system/fileView?file=/app/.env /userfile ...
show less
(PERMBLOCK) 35.245.5.122 (US/United States/District of Columbia/Washington/122.5.245.35.bc.googleuse ...
show more(PERMBLOCK) 35.245.5.122 (US/United States/District of Columbia/Washington/122.5.245.35.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
{"level":"info","ts":1791980825.3816845,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1791980825.3816845,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.245.5.122","remote_port":"41848","client_ip":"35.245.5.122","proto":"HTTP/2.0","method":"GET","host":"status.rehang.com","uri":"/static../.env","headers":{"Accept":["*/*"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.rehang.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000890941,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1791980825.3833885,"logger":"http.log.access.log1
...
show less
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show moreWeb scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
Anonymous
Web probing (622 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by ...
show moreWeb probing (622 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
