JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.225.129.197

135.225.129.197 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇪 Sweden
City	Gavle, Gavleborg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.225.129.197

Whois 135.225.129.197

IP Abuse Reports for 135.225.129.197:

This IP address has been reported a total of 38 times from 23 distinct sources. 135.225.129.197 was first reported on June 19th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-19 22:26:48 (3 days ago)		Brute-Force Web App Attack
🇨🇦 KIsmay	2026-06-19 20:26:48 (3 days ago)	Jun 19 16:26:44 www4 WPAudit[2515740]: 135.225.129.197 trilloperelloyates.com "Mozilla/5.0 (Macintos ... show more Jun 19 16:26:44 www4 WPAudit[2515740]: 135.225.129.197 trilloperelloyates.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0" [email protected]:63a9f0ea7bb98050796b649e85481845 FAIL Jun 19 16:26:45 www4 WPAudit[2515738]: 135.225.129.197 trilloperelloyates.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0" administrator:Jane392216 FAIL Jun 19 16:26:46 www4 WPAudit[2515740]: 135.225.129.197 trilloperelloyates.com "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" WhoAdminKnows:Who1oxpjbze1Knows FAIL Jun 19 16:26:46 www4 WPAudit[2515738]: 135.225.129.197 trilloperelloyates.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" webuser:azLU0o0GmtOy FAIL Jun 19 16:26:47 www4 WPAudit[2515740]: 135.225.129.197 trilloperelloyates.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, lik ... show less	Brute-Force Web App Attack
🇨🇭 Origon	2026-06-19 20:05:48 (3 days ago)	http-wordpress_user-enum - IP: 135.225.129.197 - time="2026-06-19T22:05:48+02:00" level=info msg="( ... show more http-wordpress_user-enum - IP: 135.225.129.197 - time="2026-06-19T22:05:48+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress_user-enum by ip 135.225.129.197 (SE/8075) : 4h ban on Ip 135.225.129.197" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 19:30:17 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 135.225.129.197 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 135.225.129.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 15:30:10.715980 2026] [security2:error] [pid 24988:tid 24990] [client 135.225.129.197:59703] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|whitecrosslibrary.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "whitecrosslibrary.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWYwmHXCy8IatcfzbKJFwAAAUA"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 QT	2026-06-19 19:27:39 (3 days ago)	Unauthorised WordPress admin login attempted at 2026-06-20 05:27:32 +1000	Web App Attack
🇦🇺 QT	2026-06-19 18:52:57 (3 days ago)	Unauthorised WordPress admin login attempted at 2026-06-20 04:52:51 +1000	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-19 18:50:37 (3 days ago)	valueaddedpromotions.com.au:443 135.225.129.197 - - [20/Jun/2026:04:50:35 +1000] "GET /?author=1 HTT ... show more valueaddedpromotions.com.au:443 135.225.129.197 - - [20/Jun/2026:04:50:35 +1000] "GET /?author=1 HTTP/1.1" 404 407702 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" ... show less	Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-19 18:49:27 (3 days ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇳🇱 Mangelot Hosting	2026-06-19 18:46:00 (3 days ago)	(wp_login_try) srv104 WP Login Attempt 135.225.129.197 (SE/Sweden/-): 10 in the last 3600 secs; Port ... show more (wp_login_try) srv104 WP Login Attempt 135.225.129.197 (SE/Sweden/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 18:40:09 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 135.225.129.197 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 135.225.129.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 14:40:04.363841 2026] [security2:error] [pid 29116:tid 29116] [client 135.225.129.197:62292] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|thesmithcouple.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thesmithcouple.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWNBK_wsBzeGgOEV4n09wAAABM"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Victor López	2026-06-19 18:11:52 (3 days ago)	vpardilalaw.com 135.225.129.197 - - [19/Jun/2026:13:11:45 -0500] "GET /wp-login.php HTTP/1.1" 200 19 ... show more vpardilalaw.com 135.225.129.197 - - [19/Jun/2026:13:11:45 -0500] "GET /wp-login.php HTTP/1.1" 200 1930 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" vpardilalaw.com 135.225.129.197 - - [19/Jun/2026:13:11:47 -0500] "GET /?author=1 HTTP/1.1" 404 6274 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" vpardilalaw.com 135.225.129.197 - - [19/Jun/2026:13:11:51 -0500] "GET /?author=4 HTTP/1.1" 404 6275 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 18:00:17 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 135.225.129.197 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 135.225.129.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 14:00:13.846840 2026] [security2:error] [pid 1913:tid 2040] [client 135.225.129.197:60178] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|topo.switchbl8.nl\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "topo.switchbl8.nl"] [uri "/wp-json/wp/v2/users"] [unique_id "ajWDrU5laSZ1tVvtpFohcwAAAQ4"], referer: https://duckduckgo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-06-19 17:37:03 (3 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 17:26:22 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 135.225.129.197 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 135.225.129.197 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 13:26:14.826915 2026] [security2:error] [pid 24260:tid 24260] [client 135.225.129.197:58131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|snowrideadventures.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "snowrideadventures.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajV7tjP3ZPvlFjMTl3TwYwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-19 16:34:26 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.207.41.128

🇱🇹 45.227.254.170

🇶🇦 2600:1900:4260:40e::121

🇩🇪 217.248.1.107

🇪🇸 196.196.150.5

🇧🇷 177.86.4.152

🇺🇦 159.224.216.3

🇨🇳 121.29.84.238

🇩🇪 91.92.240.196

🇺🇸 72.10.32.138

🇺🇸 69.175.33.170

🇺🇸 64.62.197.141

🇺🇸 64.62.197.108

🇵🇱 34.116.213.123

🇺🇸 216.25.89.143

🇺🇸 209.141.57.35

🇬🇧 185.247.137.123

🇳🇱 185.246.155.234

🇧🇷 168.227.232.157

🇸🇦 142.247.231.62