This IP address has been reported a total of
27
times from
26 distinct
sources.
35.245.107.52 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 10
reports;
United States of America
with 4
reports;
Netherlands
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
20
times;
Brute-Force
8
times;
Bad Web Bot
5
times;
Hacking
4
times;
Port Scan
2
times;
Other
2
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 35.245.107.52, Reason: ...
show moreCluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 35.245.107.52, Reason:[(manifest) WordPress wlwmanifest.xml Attack 35.245.107.52 (US/United States/52.107.245.35.bc.googleusercontent.com): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
(mod_security) mod_security (id:225170) triggered by 35.245.107.52 (52.107.245.35.bc.googleuserconte ...
show more(mod_security) mod_security (id:225170) triggered by 35.245.107.52 (52.107.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 10:08:20.781603 2026] [security2:error] [pid 14945:tid 14960] [client 35.245.107.52:53052] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aafm.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "asuYVAR9HUzrztNTuzFS1AAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
Automated web scanner. Requested suspicious paths: //wp-includes/wlwmanifest.xml. UTC: 2026-10-11 13 ...
show moreAutomated web scanner. Requested suspicious paths: //wp-includes/wlwmanifest.xml. UTC: 2026-10-11 13:31:33.
show less
{"ClientAddr":"35.245.107.52:50762","ClientHost":"35.245.107.52","ClientPort":"50762","ClientUsernam ...
show more{"ClientAddr":"35.245.107.52:50762","ClientHost":"35.245.107.52","ClientPort":"50762","ClientUsername":"-","DownstreamContentSize":416,"DownstreamStatus":403,"Duration":399676130,"OriginContentSize":416,"OriginDuration":396833762,"OriginStatus":403,"Overhead":2842368,"RequestAddr":"www.cleveradmin.de","RequestContentSize":489,"RequestCount":2263201,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-10-11T16:01:39.414750517+02:00","StartUTC":"2026-10-11T14:01:39.414750517Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-10-11T16:01:39+02:00"}
{"ClientAddr":"35.245.107.52:50762","ClientHost":"35.245.107.52","
...
show less
