AbuseIPDB » 135.232.232.57
135.232.232.57
This IP was reported 11 times. Confidence of
Abuse
is 65% : ?
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇺🇸
United States of America
City
Chicago, Illinois
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 135.232.232.57 :
This IP address has been reported a total of
11
times from
11 distinct
sources.
135.232.232.57 was first reported on
June 2nd 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇦🇹
urnilxfgbez
2026-06-03 22:45:00
(2 days ago)
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇮
iamxorum
2026-06-03 02:34:07
(3 days ago)
2026-06-03T02:34:07.102111+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ...
show more
2026-06-03T02:34:07.102111+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=135.232.232.57 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=28102 DF PROTO=TCP SPT=16460 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇩🇪
Hary74656
2026-06-03 01:56:23
(3 days ago)
[Wed Jun 03 03:56:07.690171 2026] [security2:error] [pid 2302:tid 2674] [client 135.232.232.57:16458 ...
show more
[Wed Jun 03 03:56:07.690171 2026] [security2:error] [pid 2302:tid 2674] [client 135.232.232.57:16458] [client 135.232.232.57] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/head"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "78.46.107.184"] [uri "/.git/HEAD"] [unique_id "ah-Jt798Bq3lkY91GwlxvQAAAxA"]
[Wed Jun 03 03:56:09.997356 2026] [security2:error] [pid 2263:tid 2553] [client 135.232.232.57:16475] [client 135.232.232.57] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share
...
show less
Web App Attack
🇬🇧
PeravixGroup
2026-06-03 01:23:48
(3 days ago)
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ...
show more
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
show less
Port Scan
Bad Web Bot
🇷🇸
Scan
2026-06-03 01:17:33
(3 days ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇹🇭
Sawasdee
2026-06-03 00:59:36
(3 days ago)
Port Scan
...
Port Scan
🇺🇸
wteiken
2026-06-03 00:51:18
(3 days ago)
2026-06-02T20:51:13.002983-04:00 nostromo.teiken.net kernel: [43070.077291] syn_limit:IN=en-wan OUT= ...
show more
2026-06-02T20:51:13.002983-04:00 nostromo.teiken.net kernel: [43070.077291] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=135.232.232.57 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=43064 DF PROTO=TCP SPT=16841 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-06-02T20:51:13.803051-04:00 nostromo.teiken.net kernel: [43070.877359] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=135.232.232.57 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=21588 DF PROTO=TCP SPT=16770 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-06-02T20:51:15.409876-04:00 nostromo.teiken.net kernel: [43072.482157] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=135.232.232.57 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=64943 DF PROTO=TCP SPT=16837 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-06-02T20:51:16.439873-04:00 nostromo.teiken.net kernel: [43073.509666] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a
...
show less
Port Scan
🇧🇷
P1n4
2026-06-03 00:35:10
(3 days ago)
Heimdal IDS auto-block: sensitive_file (score=0.80)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 00:08:42
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 135.232.232.57 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 135.232.232.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 20:08:39.205187 2026] [security2:error] [pid 24563:tid 24563] [client 135.232.232.57:16466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.138"] [uri "/.git/HEAD"] [unique_id "ah9wh5uvwSu81BrXkY4BgwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-02 21:35:41
(3 days ago)
Multiple WAF Violations
Web App Attack
2026-06-02 21:35:27
(3 days ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: