JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.232.225.22

135.232.225.22 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 44%: ?

44%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.232.225.22

Whois 135.232.225.22

IP Abuse Reports for 135.232.225.22:

This IP address has been reported a total of 22 times from 18 distinct sources. 135.232.225.22 was first reported on August 22nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-09-02 15:25:43 (1 day ago)	Bad guys doing bad things, bad crawling	Bad Web Bot
🇷🇸 Scan	2026-08-27 00:32:28 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-08-27 00:00:38 (1 week ago)	denied traffic to a honeypot network. destination port 2096.	Port Scan Hacking
Anonymous	2026-08-26 23:52:38 (1 week ago)	Blocked by firewall on hugin [2087/tcp] \| Rule: UFW \| SPT: 18497 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [2087/tcp] \| Rule: UFW \| SPT: 18497 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 www.fransveldman.world	2026-08-18 11:03:04 (2 weeks ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot
🇹🇼 kk_it_man	2026-08-02 10:00:14 (1 month ago)		Port Scan
Anonymous	2026-08-02 07:05:15 (1 month ago)	PORT & IP Scan.	Port Scan Brute-Force
🇫🇷 dynamix	2026-08-02 06:07:43 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 RAP	2026-08-02 05:53:26 (1 month ago)	2026-08-02 05:53:26 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
Anonymous	2026-08-02 05:10:09 (1 month ago)	denied traffic to a honeypot network. destination port 2096.	Port Scan Hacking
🇩🇪 2048	2026-05-27 15:59:28 (3 months ago)	2026-05-27T17:59:25.699883+02:00 machodeer kernel: [2605483.058668] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-05-27T17:59:25.699883+02:00 machodeer kernel: [2605483.058668] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=135.232.225.22 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=34265 DF PROTO=TCP SPT=39041 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-27T17:59:26.728739+02:00 machodeer kernel: [2605484.087449] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=135.232.225.22 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=34266 DF PROTO=TCP SPT=39041 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-27T17:59:27.751697+02:00 machodeer kernel: [2605485.110474] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=135.232.225.22 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=34267 DF PROTO=TCP SPT=39041 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇦🇹 René Hickersberger	2026-04-10 21:47:10 (4 months ago)	malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; ... show more malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 21:43:30 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 135.232.225.22 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 135.232.225.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 17:43:25.288133 2026] [security2:error] [pid 3427171:tid 3427171] [client 135.232.225.22:23707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test0304.jmnr.net"] [uri "/.git/config"] [unique_id "adlu_UtfVLtjdmourIhV9AAAAA8"], referer: https://www.yahoo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-04-10 20:35:02 (4 months ago)	1.326 requests with url.path */.git/config	Brute-Force Bad Web Bot
🇵🇱 Kitki30.com	2026-04-10 20:21:08 (4 months ago)	HTTP Probing. Log: 135.232.225.22 - - [10/Apr/2026:22:21:07 +0200] "GET /.git/config HTTP/1.1" 301 1 ... show more HTTP Probing. Log: 135.232.225.22 - - [10/Apr/2026:22:21:07 +0200] "GET /.git/config HTTP/1.1" 301 162 "https://kitki30.tk/.git/config" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.210

🇬🇧 159.65.80.223

🇺🇸 158.94.187.20

🇭🇰 156.225.1.10

🇮🇪 134.149.104.22

🇩🇪 130.12.180.51

🇨🇳 111.178.126.154

🇺🇸 97.100.84.220

🇷🇺 85.12.239.2

🇺🇸 50.145.35.34

🇨🇳 42.62.2.29

🇷🇺 37.113.151.62

🇺🇸 34.24.63.36

🇺🇸 16.125.253.145

🇧🇷 2804:25ac:319:9a00:1178:e934:69e3:6ee0

🇨🇱 200.112.237.143

🇧🇷 189.113.47.155

🇨🇳 171.12.10.120

🇰🇷 113.217.213.189

🇹🇷 94.154.43.153