This IP address has been reported a total of
29
times from
19 distinct
sources.
161.35.189.212 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-26 ...
show moreBlocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-26 05:58:58 to 2026-09-26 05:58:58
show less
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show moreThis address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /wp-login.php | 2026-09-26 01:57 UTC
show less
IPS Attack Blocked by server.mura******.com.tr Fortigate-80E. Attack Name: WordPress.REST.API.batch- ...
show moreIPS Attack Blocked by server.mura******.com.tr Fortigate-80E. Attack Name: WordPress.REST.API.batch-route.SQL.Injection. Dest Port: 80. Service: HTTP. Message: applications3: WordPress.REST.API.batch-route.SQL.Injection.
show less
http-cve-probing - IP: 161.35.189.212 - time="2026-09-23T10:53:04+02:00" level=info msg="(555f66b4f ...
show morehttp-cve-probing - IP: 161.35.189.212 - time="2026-09-23T10:53:04+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 161.35.189.212 (US/14061) : 4h ban on Ip 161.35.189.212" module=db
show less