This IP address has been reported a total of
10
times from
9 distinct
sources.
15.235.72.15 was first reported on
October 10th 2025 , and the most recent report was
21 hours ago Germany
with 2
reports;
United States of America
with 2
reports;
France
with 1
report.
The most common categories in these recent reports were:
Email Spam
3
times;
Bad Web Bot
2
times;
Brute-Force
2
times;
Web App Attack
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
Touzeau
2026-10-11 11:14:35
(21 hours ago)
Email Spam
🇩🇪
FD-IX
2026-10-03 18:01:58
(1 week ago)
SMTP connection rejected due to combined.mail.abusix.zone listing.
Email Spam
2026-09-30 03:42:36
(1 week ago)
spam
Email Spam
🇩🇪
DocNetzwerk
2026-09-18 01:34:27
(3 weeks ago)
(smtp-25-to-rcpt-from-2007-leak) Recipient address has been leaked in 2007 15.235.72.15 (CA/Canada/1 ...
show more
(smtp-25-to-rcpt-from-2007-leak) Recipient address has been leaked in 2007 15.235.72.15 (CA/Canada/152357215.crimsonjubileeblanket.uk)
show less
Hacking
🇺🇸
TPI-Abuse
2026-08-24 07:21:09
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 15.235.72.15 (152357215.crimsonjubileeblanket.u ...
show more
(mod_security) mod_security (id:210730) triggered by 15.235.72.15 (152357215.crimsonjubileeblanket.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 03:21:05.734831 2026] [security2:error] [pid 10408:tid 10408] [client 15.235.72.15:23969] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.vendor21.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.vendor21.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aovw4RCuj_xWoG93EsiuFwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 23:59:50
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 15.235.72.15 (152357215.crimsonjubileeblanket.u ...
show more
(mod_security) mod_security (id:210730) triggered by 15.235.72.15 (152357215.crimsonjubileeblanket.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 19:59:43.997073 2026] [security2:error] [pid 24904:tid 24904] [client 15.235.72.15:49091] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.mwrn.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.mwrn.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aoOgb3ZBcZ3CHRRY7tmAZAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
DiodeDave
2026-08-10 09:55:17
(2 months ago)
Attempted access after blacklisting
Email Spam
🇪🇸
didevi
2025-11-24 01:08:11
(10 months ago)
SPAM or Brute force attack detected
Email Spam
Brute-Force
2025-10-13 06:37:50
(11 months ago)
spamd: identified spam
Email Spam
2025-10-10 13:23:15
(1 year ago)
TRAPPED EMAIL 15.235.72.15 (152357215.crimsonjubileeblanket.uk)
Email Spam
Showing 1 to
10
of 10 reports
