Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
35.252.105.161 has been reported 13
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
This IP address has been reported a total of
13
times from
13 distinct
sources.
35.252.105.161 was first reported on
, and the most recent report was
.
Auto-ban: 236 malicious requests on 2026-05-12 (e.g., env/backup probes, brute-force, or error burst ...
show moreAuto-ban: 236 malicious requests on 2026-05-12 (e.g., env/backup probes, brute-force, or error bursts).
show less
Vulnerability scanning detected on EarnQuest Server | Trigger path: //wordpress/wp-includes/wlwmanif ...
show moreVulnerability scanning detected on EarnQuest Server | Trigger path: //wordpress/wp-includes/wlwmanifest.xml | Total attempts: 5 | Sample paths: //wp-includes/wlwmanifest.xml, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.10... | Blocked by automated scanner detection middleware
show less
MimirWAF has 19 incidents from 1 distinct domain => {"bad_request_uri / script_kiddie_detection","bl ...
show moreMimirWAF has 19 incidents from 1 distinct domain => {"bad_request_uri / script_kiddie_detection","blacklisted_access / definite_repeat_offender"}
show less
105.927 requests with url.path */xmlrpc.php
102.433 requests with url.path //xmlrpc.php
2.632 req ...
show more105.927 requests with url.path */xmlrpc.php
102.433 requests with url.path //xmlrpc.php
2.632 requests with url.path */wp-includes/wlwmanifest.xml
show less
[TueMay1208:18:51.7946482026][security2:error][pid480491:tid480778][client35.252.105.161:0]ModSecuri ...
show more[TueMay1208:18:51.7946482026][security2:error][pid480491:tid480778][client35.252.105.161:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.annunci-ticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"agLGS82_mfiFa3KNz4-E4gAAARU\"]
show less