This IP address has been reported a total of
20
times from
19 distinct
sources.
35.252.156.59 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 6
reports;
Germany
with 4
reports;
France
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
17
times;
Bad Web Bot
6
times;
Brute-Force
4
times;
Hacking
2
times;
SSH
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"ClientAddr":"35.252.156.59:61515","ClientHost":"35.252.156.59","ClientPort":"61515","ClientUsernam ...
show more{"ClientAddr":"35.252.156.59:61515","ClientHost":"35.252.156.59","ClientPort":"61515","ClientUsername":"-","DownstreamContentSize":3771,"DownstreamStatus":200,"Duration":9154649,"OriginContentSize":3771,"OriginDuration":9052943,"OriginStatus":200,"Overhead":101706,"RequestAddr":"drive.vdkln.com","RequestContentSize":0,"RequestCount":2736476,"RequestHost":"drive.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-includes/ID3/license.txt","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cloudreve@docker","ServiceAddr":"172.18.0.19:5212","ServiceName":"cloudreve@docker","ServiceURL":"http://172.18.0.19:5212","StartLocal":"2026-10-06T09:12:10.263068983Z","StartUTC":"2026-10-06T09:12:10.263068983Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-10-06T09:12:10Z"}
{"ClientAddr":"35.252.156.59:56205","ClientHost":"35.252.156.59","ClientPort":"56205","
...
show less
http-probing - IP: 35.252.156.59 - time="2026-10-06T10:55:59+02:00" level=info msg="(555f66b4f6a745 ...
show morehttp-probing - IP: 35.252.156.59 - time="2026-10-06T10:55:59+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 35.252.156.59 (US/396982) : 4h ban on Ip 35.252.156.59" module=db
show less
