JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.232.208.153

135.232.208.153 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 33%: ?

33%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.232.208.153

Whois 135.232.208.153

IP Abuse Reports for 135.232.208.153:

This IP address has been reported a total of 26 times from 16 distinct sources. 135.232.208.153 was first reported on March 1st 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 www.fransveldman.world	2026-07-15 11:45:44 (3 hours ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot
🇯🇵 demonsword	2026-06-20 11:02:42 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cp.cloudflare.com:80 show less	Open Proxy Port Scan
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 dynamix	2026-06-02 21:14:29 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 RAP	2026-06-02 20:43:43 (1 month ago)	2026-06-02 20:43:43 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
🇬🇧 PeravixGroup	2026-06-02 20:23:36 (1 month ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 MPL	2026-06-02 20:05:15 (1 month ago)	tcp/2087 (2 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-06-02 18:32:17 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 135.232.208.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 135.232.208.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 14:32:13.956755 2026] [security2:error] [pid 26400:tid 26400] [client 135.232.208.153:15431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.62"] [uri "/.git/HEAD"] [unique_id "ah8hrdi4dVnl4Kxd9CnowwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 17:53:33 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 135.232.208.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 135.232.208.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 13:53:28.866047 2026] [security2:error] [pid 31978:tid 31978] [client 135.232.208.153:15569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.88"] [uri "/.git/HEAD"] [unique_id "ah8YmOb7WpLmwvB06524GgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 17:33:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 135.232.208.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 135.232.208.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 13:33:44.419529 2026] [security2:error] [pid 25094:tid 25111] [client 135.232.208.153:15405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.123"] [uri "/.git/HEAD"] [unique_id "ah8T-BDkcBrMDpVXdV8-0wAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-02 17:25:54 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇺 2000cn.com.au	2026-06-02 17:14:01 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-05-21 03:02:22 (1 month ago)	(PERMBLOCK) 135.232.208.153 (US/United States/-) has had more than 4 temp blocks in the last 86400 s ... show more (PERMBLOCK) 135.232.208.153 (US/United States/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-05-21 02:10:05 (1 month ago)	(caddyscan) Scanner path probe from 135.232.208.153 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 135.232.208.153 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:01:56:42 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:01:56:42 +0000] "GET /@fs/.git/config?import&raw HTTP/1.1" [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:01:56:42 +0000] "GET /@fs/.git/config?import?raw HTTP/1.1" [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:02:10:00 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:02:10:00 +0000] "GET /.env HTTP/1.1" show less	Port Scan
Anonymous	2026-05-21 01:26:35 (1 month ago)	(caddyscan) Scanner path probe from 135.232.208.153 (US/United States/-): 5 in the last 3600 secs; P ... show more (caddyscan) Scanner path probe from 135.232.208.153 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:01:26:34 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:01:26:34 +0000] "GET /config/.env HTTP/1.1" [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:01:26:34 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:01:26:34 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 135.232.208.153 - - [21/May/2026:01:26:34 +0000] "GET /.env HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 165.154.41.115

🇻🇳 113.162.237.51

🇩🇪 44.150.87.226

🇺🇸 2604:a880:400:d1:0:4:6c77:2001

🇰🇷 175.205.252.216

🇳🇱 172.253.95.215

🇮🇳 152.32.156.158

🇳🇱 138.124.30.225

🇫🇷 91.231.89.176

🇫🇷 91.231.89.60

🇩🇪 77.90.6.168

🇺🇸 44.250.199.77

🇨🇳 14.103.122.90

🇺🇸 165.154.36.71

🇺🇸 159.26.103.105

🇳🇱 136.144.128.4

🇹🇷 94.154.43.243

🇳🇱 91.92.40.176

🇸🇬 47.84.139.198

🇳🇱 45.148.10.240