This IP address has been reported a total of
37
times from
35 distinct
sources.
35.252.241.246 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 11
reports;
United States of America
with 7
reports;
Switzerland
with 4
reports.
The most common categories in these recent reports were:
Web App Attack
23
times;
Brute-Force
12
times;
Bad Web Bot
9
times;
Hacking
8
times;
Port Scan
4
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Cluster member (Omitted) (FR/France/-) said, TEMPDENY 35.252.241.246, Reason:[(Suspicious403) Suspic ...
show moreCluster member (Omitted) (FR/France/-) said, TEMPDENY 35.252.241.246, Reason:[(Suspicious403) Suspicious activity detected 35.252.241.246 (US/United States/246.241.252.35.bc.googleusercontent.com): 2 in the last 3600 secs]
show less
(mod_security) mod_security (id:900006) triggered by 35.252.241.246 (US/United States/246.241.252.35 ...
show more(mod_security) mod_security (id:900006) triggered by 35.252.241.246 (US/United States/246.241.252.35.bc.googleusercontent.com): 3 in the last 900 secs (CF_ENABLE)
show less
2026/10/21 12:23:41 [error] 602#602: *123546 "/etc/nginx/html/index.html" is not found (2: No such f ...
show more2026/10/21 12:23:41 [error] 602#602: *123546 "/etc/nginx/html/index.html" is not found (2: No such file or directory), client: 35.252.241.246, server: fhem.ruhnke.cloud, request: "POST / HTTP/1.1", host: "fhem.ruhnke.cloud"
2026/10/21 12:23:42 [error] 602#602: *123546 "/etc/nginx/html/index.html" is not found (2: No such file or directory), client: 35.252.241.246, server: fhem.ruhnke.cloud, request: "POST / HTTP/1.1", host: "fhem.ruhnke.cloud"
...
show less
TSEC Honeypot Network report. Threat score: 68/100. Categories: Port Scan, Hacking, Brute-Force, Web ...
show moreTSEC Honeypot Network report. Threat score: 68/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: h0neytr4p. Context: Attacker IP 35.252.241.246 observed using TLS client fingerprint 'Unknown TLS Client (dc3750f0e34a)' 6 times when connecting to a financial services sector honeypot between 2026-10-21 05:14 and 202....
show less
Web attack blocked by WAF: POST / x2 (Special shell symbol in request; Special shell symbol in reque ...
show moreWeb attack blocked by WAF: POST / x2 (Special shell symbol in request; Special shell symbol in request (payload-driven)).
[21/Oct/2026:04:36:21 +0300] "POST / HTTP/1.1" UA="fasthttp" -> Special shell symbol in request; Special shell symbol in request (payload-driven)
[21/Oct/2026:04:36:22 +0300] "POST / HTTP/1.1" UA="fasthttp" -> Special shell symbol in request; Special shell symbol in request (payload-driven)
show less
Automated RCE exploit attempt targeting React Server Components CVE-2025-55182 React2Shell blocked b ...
show moreAutomated RCE exploit attempt targeting React Server Components CVE-2025-55182 React2Shell blocked by FortiGate IPS
show less
