This IP address has been reported a total of
6
times from
4 distinct
sources.
35.198.52.207 was first reported on
October 26th 2026 , and the most recent report was
25 minutes ago Germany
with 3
reports;
Italy
with 2
reports;
United Kingdom of Great Britain and Northern Ireland
with 1
report.
The most common categories in these recent reports were:
Brute-Force
4
times;
SSH
3
times;
Web App Attack
3
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-26 06:37:29
(25 minutes ago)
35.198.52.207 - - [26/Oct/2026:07:37:28 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (M ...
show more
35.198.52.207 - - [26/Oct/2026:07:37:28 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.198.52.207 - - [26/Oct/2026:07:37:29 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.198.52.207 - - [26/Oct/2026:07:37:29 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.198.52.207 - - [26/Oct/2026:07:37:29 +0100] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.198.52.207 - - [26/Oct/2026:07:37:29 +0100] "GET /%2e%2e/%2e%
...
show less
Brute-Force
SSH
🇮🇹
zenmorro
2026-10-26 05:58:09
(1 hour ago)
Honeypot hit (truenas:444) — scanner-path: /admin/login. Automated report from honeypot infrastructu ...
show more
Honeypot hit (truenas:444) — scanner-path: /admin/login. Automated report from honeypot infrastructure
show less
Port Scan
Web App Attack
2026-10-26 05:55:48
(1 hour ago)
35.198.52.207 - - [26/Oct/2026:06:55:48 +0100] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0 ...
show more
35.198.52.207 - - [26/Oct/2026:06:55:48 +0100] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.198.52.207 - - [26/Oct/2026:06:55:48 +0100] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.198.52.207 - - [26/Oct/2026:06:55:48 +0100] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.198.52.207 - - [26/Oct/2026:06:55:48 +0100] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.198.52.207 - - [26/Oct/2026:06:55:48 +0100] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Brute-Force
SSH
🇬🇧
consul.to
2026-10-26 05:49:55
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
2026-10-26 05:19:54
(1 hour ago)
35.198.52.207 - - [26/Oct/2026:06:19:52 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 Ap ...
show more
35.198.52.207 - - [26/Oct/2026:06:19:52 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.198.52.207 - - [26/Oct/2026:06:19:53 +0100] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.198.52.207 - - [26/Oct/2026:06:19:53 +0100] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.198.52.207 - - [26/Oct/2026:06:19:53 +0100] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http:
...
show less
Brute-Force
SSH
🇮🇹
VHosting
2026-10-26 05:05:04
(1 hour ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Showing 1 to
6
of 6 reports
