This IP address has been reported a total of
40
times from
30 distinct
sources.
35.252.103.189 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Auto ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Automated scanning
show less
Bad Web Bot
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Auto ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Automated scanning
show less
Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ...
show moreRequests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/1/small_image/270x/f5eb122a735ef0711ea07901775df9ca/1/_/1_269_7.jpg ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36')
show less
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security
DDoS Attack
Hacking
Exploited Host
Anonymous
FortiWeb WAF: 4 attacks detected. Threat Score: 74800. Types: Client Management(2), Block IP List(2) ...
show moreFortiWeb WAF: 4 attacks detected. Threat Score: 74800. Types: Client Management(2), Block IP List(2). Origin: United States.
show less
(mod_security) mod_security (id:11000011) triggered by 35.252.103.189: 1 in the last 86400 secs; Por ...
show more(mod_security) mod_security (id:11000011) triggered by 35.252.103.189: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 08:47:17.709506 2026] [security2:error] [pid 104036:tid 104235] [client 35.252.103.189:55584] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 189.103.252.35.bc.googleusercontent.com"] [hostname "asteriassantorini.com"] [uri "/wp-content/plugins/justified-image-grid/timthumb.php"] [unique_id "aiudZSyuLlw2tzl8Q_BrOgAAAIs"]
show less
Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ...
show moreRequests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/c686970eaa95e0e7690cb2adc1d7f1aa/f/0/f024.jpg ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36')
show less
2026-06-10T11:09:48Z - Recognized attacks\bad behavior from IP address 35.252.103.189 on port 443\80 ...
show more2026-06-10T11:09:48Z - Recognized attacks\bad behavior from IP address 35.252.103.189 on port 443\80 (3 daily hits): client denied by server configuration
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack