This IP address has been reported a total of
108
times from
75 distinct
sources.
35.204.96.52 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
COMODO WAF: URL file extension is restricted by policy. Match of "pmFromFile userdata_wl_extensions" ...
show moreCOMODO WAF: URL file extension is restricted by policy. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. (210730-185)
show less
Hacking
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Clou ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Cloud secrets probing
show less
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.204.96. ...
show moreMalicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.204.96.52 (NL/The Netherlands/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 35.204.96.52 (NL/The Netherlands/52.96.204.35.bc.googleusercontent.com): 20 in the last 3600 secs
show less
ET EXPLOIT Local File Inclusion with Shell Execution via proc/self/environ
ET INFO Request to Hidd ...
show moreET EXPLOIT Local File Inclusion with Shell Execution via proc/self/environ
ET INFO Request to Hidden Environment File - Inbound
ET SCAN Bing Webcrawler User-Agent (BingBot)
ET WEB_SERVER Likely Malicious Request for /proc/self/environ
ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927)
GPL WEB_SERVER 403 Forbidden
show less
Port Scan
Showing 1 to
15
of 108 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ