This IP address has been reported a total of
21
times from
21 distinct
sources.
35.199.44.252 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Repeated requests for suspicious nonexistent URLs, for example: /wp/wp-includes/wlwmanifest.xml (HTT ...
show moreRepeated requests for suspicious nonexistent URLs, for example: /wp/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36")
show less
[16/Oct/2026:11:37:10 +0300] -- 35.199.44.252 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp- ...
show more[16/Oct/2026:11:37:10 +0300] -- 35.199.44.252 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-includes/ID3/license.txt HTTP/1.1
show less
http-probing - IP: 35.199.44.252 - time="2026-10-16T10:27:06+02:00" level=info msg="(555f66b4f6a745 ...
show morehttp-probing - IP: 35.199.44.252 - time="2026-10-16T10:27:06+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 35.199.44.252 (US/396982) : 4h ban on Ip 35.199.44.252" module=db
show less
Web App Attack
Anonymous
WordPress login and plugin enumeration; e.g. //wp-includes/ID3/license.txt, //wordpress/wp-includes/ ...
show moreWordPress login and plugin enumeration; e.g. //wp-includes/ID3/license.txt, //wordpress/wp-includes/wlwmanifest.xml, //blog/wp-includes/wlwmanifest.xml. Requests blocked by our WAF (automated report).
show less
(nginxWPSCANNER) nginx WordPress scanner detected from 35.199.44.252 (US/United States/District of C ...
show more(nginxWPSCANNER) nginx WordPress scanner detected from 35.199.44.252 (US/United States/District of Columbia/Washington D.C./252.44.199.35.bc.googleusercontent.com)
show less