JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.212.135.156

188.212.135.156 was found in our database!

This IP was reported 168 times. Confidence of Abuse is 11%: ?

11%

ISP	VPN Consumer Warsaw, Poland
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 188.212.135.156

Whois 188.212.135.156

IP Abuse Reports for 188.212.135.156:

This IP address has been reported a total of 168 times from 68 distinct sources. 188.212.135.156 was first reported on January 2nd 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 pengpeng	2026-06-14 18:59:04 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 4500 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇬🇧 consul.to	2026-06-04 14:51:21 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-06-03 06:49:13 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 mnsf	2026-05-04 15:05:24 (2 months ago)	Login Too Frequent (8)	Brute-Force Web App Attack
🇫🇮 as211431.net	2026-05-03 06:24:15 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-content/plugins/admin.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 consul.to	2026-04-28 10:04:08 (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-04-28 03:59:26 (2 months ago)	(mod_security) mod_security (id:222160) triggered by 188.212.135.156 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:222160) triggered by 188.212.135.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 23:59:21.250554 2026] [security2:error] [pid 24210:tid 24210] [client 188.212.135.156:44751] ModSecurity: Access denied with code 403 (phase 1). String match "wp-content/plugins/wp-easycart/inc/admin/phpinfo.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6347"] [id "222160"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in The EasyCart plugin before 2.0.6 for WordPress (CVE-2014-4942)\|\|earlyfordv8crrg10.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "earlyfordv8crrg10.com"] [uri "/wp-content/plugins/wp-easycart/inc/admin/phpinfo.php"] [unique_id "afAwmUurmN9z9kq9MKmKDAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-04-26 09:17:10 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Site.eu	2026-04-26 04:18:51 (3 months ago)	Excessive 404/403 errors	Brute-Force
🇫🇷 dynamix	2026-04-21 14:51:04 (3 months ago)	Multiple WAF Violations	Web App Attack
🇭🇺 kranem	2026-04-17 00:00:18 (3 months ago)	Triggered Cloudflare WAF from PL. Action taken: LINK_MAZE_INJECTED ASN: 206092 (SECFIREWALLAS) Proto ... show more Triggered Cloudflare WAF from PL. Action taken: LINK_MAZE_INJECTED ASN: 206092 (SECFIREWALLAS) Protocol: HTTP/1.1 (GET method) Endpoint: //blog/ Timestamp: 2026-04-16T23:22:35Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 threatintelligence_bvc	2026-03-25 05:00:33 (4 months ago)		Brute-Force
🇺🇸 r3versedk	2026-03-22 10:10:09 (4 months ago)	🛡️ Automated Threat Report from maxjensen.dk 🎯 Attack Type: Botnet Fingerprint 🚨 Severity: CRITICAL ... show more 🛡️ Automated Threat Report from maxjensen.dk 🎯 Attack Type: Botnet Fingerprint 🚨 Severity: CRITICAL 📊 Threat Score: 95/100 📈 Total Attacks: 421 (database verified, seen over today) 🔍 Peak Score: 95/100 🎯 Common Types: Botnet Fingerprint(1x) 🔍 Fingerprint: 9f96b00ce11bc787 🤖 AI/ML: 🤝 Multi-Model Consensus (neural-network, q-learning, gpt) - 🧠 NN (55%): block (99.4%) \| 🎮 QL (23%): block (75.0%) \| 🤖 Claude (23%): monitor (70.0%) \| ⚖️ dynamic+boosted weights... Detected: 2026-03-22T10:10:09.777Z show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-21 23:19:21 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 188.212.135.156 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 188.212.135.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 19:19:16.667832 2026] [security2:error] [pid 1840:tid 1840] [client 188.212.135.156:48017] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|usbea.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "usbea.com"] [uri "/backup/wallet.dat"] [unique_id "ab8ndMoPTOA5qoKRkr2BCwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-21 22:29:28 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 188.212.135.156 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 188.212.135.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 18:29:20.826529 2026] [security2:error] [pid 24994:tid 24994] [client 188.212.135.156:51731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barnesandbrower.com"] [uri "/.env"] [unique_id "ab8bwBkgWVTAbQ7O-TXtAAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 168 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.217.36.221

🇧🇾 37.212.81.67

🇩🇪 185.220.101.58

🇯🇴 176.29.227.154

🇻🇳 171.244.141.86

🇺🇸 162.241.239.241

🇪🇬 156.198.246.104

🇺🇸 129.121.119.196

🇫🇷 91.231.89.80

🇳🇱 45.148.10.147

🇰🇷 1.241.64.237

🇺🇸 172.253.210.90

🇺🇸 147.185.132.123

🇸🇬 103.134.154.138

🇿🇦 102.64.39.120

🇺🇸 72.9.243.11

🇺🇸 66.132.195.119

🇺🇸 45.33.84.124

🇬🇧 35.203.211.225

🇺🇸 13.56.178.77