JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.220.211.140

135.220.211.140 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.220.211.140

Whois 135.220.211.140

IP Abuse Reports for 135.220.211.140:

This IP address has been reported a total of 42 times from 40 distinct sources. 135.220.211.140 was first reported on August 28th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 NyaljBe	2025-08-29 05:23:00 (10 months ago)	135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /w.php HTTP/1.1" 404 153 "-" "-" 135.220.211. ... show more 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /w.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /users.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /tinyfilemanager.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /nc4.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /mm.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /makeasmtp.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /lock360.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /ioxi-o.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /goods.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /goat.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:45:03 +0200] "GET /gecko.php HTTP/1.1" 404 153 "-" show less	Web App Attack
🇬🇧 openstrike.co.uk	2025-08-29 05:13:14 (10 months ago)	41 attacks on PHP URLs: GET /wsa.php HTTP/1.1	Web App Attack
🇭🇺 DumaNet	2025-08-29 01:09:00 (10 months ago)	WordPress plugin attack attempts. Date: 2025 Aug 28. 20:18:50 Source IP: 135.220.211.140 Portio ... show more WordPress plugin attack attempts. Date: 2025 Aug 28. 20:18:50 Source IP: 135.220.211.140 Portion of the log(s): 135.220.211.140 - [28/Aug/2025:20:18:46 +0200] "GET /wsa.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:18:46 +0200] "GET /wp.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:18:46 +0200] "GET /wp-setup.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:18:46 +0200] "GET /wp-includes/fonts/index.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:18:46 +0200] "GET /wp-includes/fonts/admin.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:18:46 +0200] "GET /wp-includes/IXR/autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:18:46 +0200] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:18:46 +0200] "GET /wp-content/index.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:18:46 +0200] "GET /wp-api.php HTTP/1.1" 404 153 "-" "-" show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-08-29 00:41:00 (10 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Aug 28. 20:09:46 Source IP: 135.22 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Aug 28. 20:09:46 Source IP: 135.220.211.140 Portion of the log(s): 135.220.211.140 - [28/Aug/2025:20:07:46 +0200] "GET /edit.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:07:46 +0200] "GET /cong.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:07:46 +0200] "GET /classwithtostring.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:07:46 +0200] "GET /chosen.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:07:46 +0200] "GET /buy.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:07:46 +0200] "GET /autoload_classmap/function.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:07:46 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:07:46 +0200] "GET /atomlib.php HTTP/1.1" 404 153 "-" "-" 135.220.211.140 - [28/Aug/2025:20:07:46 +0200] "GET /asasx.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇨🇦 polycoda	2025-08-28 22:40:52 (10 months ago)	📂 Probes for tons of inexistent directory listings	Hacking Web App Attack
🇫🇮 Christopher Hughes	2025-08-28 22:07:36 (10 months ago)	[Thu Aug 28 23:07:36.091807 2025] [proxy_fcgi:error] [pid 3192356:tid 140346258732608] [client 135.2 ... show more [Thu Aug 28 23:07:36.091807 2025] [proxy_fcgi:error] [pid 3192356:tid 140346258732608] [client 135.220.211.140:11759] AH01071: Got error 'Primary script unknown' [Thu Aug 28 23:07:36.122686 2025] [proxy_fcgi:error] [pid 3192356:tid 140345086039616] [client 135.220.211.140:11759] AH01071: Got error 'Primary script unknown' [Thu Aug 28 23:07:36.148144 2025] [proxy_fcgi:error] [pid 3192356:tid 140346126210624] [client 135.220.211.140:11759] AH01071: Got error 'Primary script unknown' [Thu Aug 28 23:07:36.171931 2025] [proxy_fcgi:error] [pid 3192356:tid 140346151388736] [client 135.220.211.140:11759] AH01071: Got error 'Primary script unknown' [Thu Aug 28 23:07:36.195729 2025] [proxy_fcgi:error] [pid 3192356:tid 140346142996032] [client 135.220.211.140:11759] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2025-08-28 22:07:11 (10 months ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 135 ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 135.220.211.140 (DE/Germany/-) show less	Brute-Force
🇩🇪 Skyrider	2025-08-28 21:44:36 (10 months ago)	135.220.211.140 - - [28/Aug/2025:23:44:36 +0200] "GET /aa.php HTTP/2.0" 404 36 "-" "-" 135.220.211.1 ... show more 135.220.211.140 - - [28/Aug/2025:23:44:36 +0200] "GET /aa.php HTTP/2.0" 404 36 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:44:36 +0200] "GET /about.php HTTP/2.0" 404 36 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:44:36 +0200] "GET /admin.php HTTP/2.0" 404 36 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:44:36 +0200] "GET /akc.php HTTP/2.0" 404 36 "-" "-" 135.220.211.140 - - [28/Aug/2025:23:44:36 +0200] "GET /alfa.php HTTP/2.0" 404 36 "-" "-" show less	Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2025-08-28 21:29:38 (10 months ago)	paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:11 +1000] "GET /aa.php HTTP/1.1" 404 7 ... show more paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:11 +1000] "GET /aa.php HTTP/1.1" 404 71747 "-" "-" paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:14 +1000] "GET /about.php HTTP/1.1" 404 69107 "-" "-" paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:16 +1000] "GET /admin.php HTTP/1.1" 404 69031 "-" "-" paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:19 +1000] "GET /akc.php HTTP/1.1" 404 69029 "-" "-" paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:22 +1000] "GET /alfa.php HTTP/1.1" 404 69030 "-" "-" paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:25 +1000] "GET /asasx.php HTTP/1.1" 404 69031 "-" "-" paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:27 +1000] "GET /atomlib.php HTTP/1.1" 404 69033 "-" "-" paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:30 +1000] "GET /autoload_classmap.php HTTP/1.1" 404 69038 "-" "-" paulshipley.com.au:443 135.220.211.140 - - [29/Aug/2025:07:28:33 ... show less	Web App Attack
🇫🇮 Kimmo Rieskaniemi	2025-08-28 21:29:37 (10 months ago)	CrowdSec triggered crowdsecurity/http-probing	Hacking Web App Attack
🇮🇩 Burayot	2025-08-28 21:23:13 (10 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 135.220.211.140 (DE/Germany/-): 1 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 135.220.211.140 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2025-08-28 21:21:32 (10 months ago)	Attempted search for exploits and vulnerabilities detected by fail2ban noscript ...	Brute-Force Web App Attack
🇱🇹 Evag Touf	2025-08-28 20:58:21 (10 months ago)	(mod_security) mod_security triggered on hostname [redacted] 135.220.211.140 (DE/Germany/-)	SQL Injection
🇮🇩 securejdprop	2025-08-28 20:32:37 (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband. Ip 135.220.211. ... show more This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband. Ip 135.220.211.140 performed 'crowdsecurity/crowdsec-appsec-outofband' (6 events over 3.291682189s) at 2025-08-28 20:32:35.69666217 +0000 UTC show less	Web App Attack
Anonymous	2025-08-28 20:30:12 (10 months ago)	Try to connect to Port Scan 65535 tcp	Port Scan

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.66

🇷🇴 92.118.39.77

🇧🇪 198.235.24.227

🇮🇩 157.66.54.166

🇭🇰 112.121.183.206

🇸🇬 101.32.145.199

🇺🇸 99.6.104.157

🇱🇹 77.90.185.21

🇨🇳 222.88.225.195

🇧🇩 103.239.252.132

🇮🇳 103.165.10.79

🇩🇪 69.5.169.8

🇺🇸 2602:80d:1008::43

🇧🇪 198.235.24.183

🇺🇸 173.255.206.73

🇮🇩 163.7.6.114

🇷🇺 95.55.54.171

🇬🇧 198.244.183.33

🇸🇬 188.214.125.60

🇺🇸 109.105.210.88