JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.232.201.248

135.232.201.248 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 27%: ?

27%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.232.201.248

Whois 135.232.201.248

IP Abuse Reports for 135.232.201.248:

This IP address has been reported a total of 14 times from 11 distinct sources. 135.232.201.248 was first reported on January 1st 2026, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 www.fransveldman.world	2026-08-19 10:35:13 (4 weeks ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot
🇺🇸 sean markis	2026-08-10 16:22:00 (1 month ago)	Saturday 8th of August 2026 at 03:50:50 AM blocked IP address 135.232.201.248. The reason is: "Exc ... show more Saturday 8th of August 2026 at 03:50:50 AM blocked IP address 135.232.201.248. The reason is: "Exceeded the maximum number of page not found errors per minute for humans.". The duration of the block is 1 day. User IP: 135.232.201.248 User hostname: 135.232.201.248 User location: Chicago, Illinois, United States show less	DDoS Attack Web Spam Port Scan Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack FTP Brute-Force Ping of Death Phishing VPN IP Hacking
Anonymous	2026-08-08 14:04:22 (1 month ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 xmission.com	2026-08-08 12:36:53 (1 month ago)	Blocked by UFW (TCP on 2078) Source port: 48163 TTL: 52 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2078) Source port: 48163 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 135.232.201.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 cwytech	2026-08-08 11:34:16 (1 month ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/http-honeypath-sniper-crit.	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-08 11:20:03 (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 raph	2026-08-08 10:55:38 (1 month ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-08 10:12:56 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 135.232.201.248 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 135.232.201.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 06:12:50.081075 2026] [security2:error] [pid 256067:tid 256067] [client 135.232.201.248:47123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.203"] [uri "/.git/HEAD"] [unique_id "ancBIpv6_JHw-qA8fZrxewAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-08-08 00:50:03 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 xmission.com	2026-04-28 19:17:47 (4 months ago)	Blocked by UFW (TCP on 9101) Source port: 56384 TTL: 115 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 9101) Source port: 56384 TTL: 115 Packet length: 40 TOS: 0x00 This report (for 135.232.201.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Rayulcifer	2026-01-02 14:15:34 (8 months ago)	135.232.201.248 - - [02/Jan/2026:09:15:33 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 ... show more 135.232.201.248 - - [02/Jan/2026:09:15:33 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 "-" "-" 135.232.201.248 - - [02/Jan/2026:09:15:33 -0500] "CONNECT speed.hetzner.de:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇮🇩 sockominfo	2026-01-01 17:00:11 (8 months ago)	Suspicious user agent detected Python/3.9 aiohttp/3.10.6. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 ( ... show more Suspicious user agent detected Python/3.9 aiohttp/3.10.6. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 40%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-01 15:00:11 (8 months ago)	Suspicious user agent detected Python/3.9 aiohttp/3.10.6. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 ( ... show more Suspicious user agent detected Python/3.9 aiohttp/3.10.6. Threat Score: 3.8/10 (LOW). CVSS: 2.7/10 (Low). Bayesian: 37%. MITRE: T1016. Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-01-01 14:00:47 (8 months ago)	Suspicious user agent detected Python/3.9 aiohttp/3.10.6. Threat Score: 0/10 (INFORMATIONAL). Report ... show more Suspicious user agent detected Python/3.9 aiohttp/3.10.6. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a12:f540:6f36:122a:2316:8fb2:a0d2:8656

🇺🇸 222.167.100.23

🇩🇪 217.160.138.66

🇺🇸 202.81.213.96

🇧🇷 177.171.123.111

🇺🇸 157.230.51.34

🇪🇬 156.192.85.220

🇮🇳 103.165.14.161

🇺🇸 91.230.168.93

🇮🇷 78.38.84.140

🇺🇦 77.75.145.77

🇺🇸 45.117.154.47

🇺🇸 45.78.88.197

🇷🇴 2.57.122.53

🇭🇺 195.38.105.137

🇩🇴 190.167.227.115

🇸🇳 172.69.15.150

🇺🇸 154.17.135.239

🇺🇸 151.244.104.100

🇵🇱 104.245.245.15