JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.232.201.81

135.232.201.81 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 40%: ?

40%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.232.201.81

Whois 135.232.201.81

IP Abuse Reports for 135.232.201.81:

This IP address has been reported a total of 31 times from 26 distinct sources. 135.232.201.81 was first reported on August 2nd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-06-03 04:50:58 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-06-03 04:47:15 (1 week ago)	tcp port scan (8 or more attempts)	Port Scan
🇧🇷 maviei	2026-06-03 03:27:37 (1 week ago)	2026-06-03T00:27:36.572548-03:00 srv1251771 kernel: [224088.795849] [UFW BLOCK] IN=eth0 OUT= MAC=40: ... show more 2026-06-03T00:27:36.572548-03:00 srv1251771 kernel: [224088.795849] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=135.232.201.81 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=7038 DF PROTO=TCP SPT=51209 DPT=8443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-03T00:27:36.573177-03:00 srv1251771 kernel: [224088.796369] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=135.232.201.81 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=63856 DF PROTO=TCP SPT=51208 DPT=2086 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-03T00:27:36.573392-03:00 srv1251771 kernel: [224088.796495] [UFW BLOCK] IN=eth0 OUT= MAC=40:e8:d4:b8:29:bb:44:38:39:ff:ff:41:08:00 SRC=135.232.201.81 DST=72.61.36.27 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=62508 DF PROTO=TCP SPT=51209 DPT=2082 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇷🇸 Scan	2026-06-03 02:28:25 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇬🇧 PeravixGroup	2026-06-03 02:21:57 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇯🇵 demonsword	2026-05-30 13:14:37 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.google.com:443 show less	Open Proxy Port Scan
🇬🇧 2048	2026-05-02 19:17:57 (1 month ago)	2026-05-02T21:17:53.252312+02:00 machodeer kernel: [457388.550773] [UFW BLOCK] IN=ens3 OUT= MAC=REDA ... show more 2026-05-02T21:17:53.252312+02:00 machodeer kernel: [457388.550773] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=135.232.201.81 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=2184 DF PROTO=TCP SPT=32776 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-02T21:17:54.313173+02:00 machodeer kernel: [457389.612332] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=135.232.201.81 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=2185 DF PROTO=TCP SPT=32776 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-02T21:17:55.252564+02:00 machodeer kernel: [457390.551801] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=135.232.201.81 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=1891 DF PROTO=TCP SPT=32777 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇨🇳 ThreatBook.io	2026-04-12 00:37:38 (2 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/135.232.201.81 2026-04-11 02:5 ... show more ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/135.232.201.81 2026-04-11 02:59:50 /@fs/app/.git/config?raw?? 2026-04-11 02:59:50 /.git/config 2026-04-11 02:59:50 /@fs/.git/config?raw?? 2026-04-11 02:59:50 /@fs/.git/config?import&raw?? 2026-04-11 02:59:50 /@fs/app/.git/config?import&raw?? show less	Web App Attack
🇺🇸 octageeks.com	2026-04-11 04:07:11 (2 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-10 22:00:26 (2 months ago)	Auto-ban: >3000 req/min op 2026-04-10	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-04-10 18:41:57 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 135.232.201.81 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 135.232.201.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 14:41:53.617633 2026] [security2:error] [pid 2298614:tid 2298614] [client 135.232.201.81:25415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thechoicesy.com"] [uri "/.git/config"] [unique_id "adlEcdTNMQVTQLaJeh8imAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-04-10 18:34:14 (2 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇮🇹 alph44	2026-04-10 17:42:28 (2 months ago)	(mod_security) mod_security (id:949110) triggered by 135.232.201.81 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:949110) triggered by 135.232.201.81 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-10 17:07:06 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 135.232.201.81 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 135.232.201.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 13:07:00.588457 2026] [security2:error] [pid 1975311:tid 1975311] [client 135.232.201.81:26501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dev.handyrehab.com"] [uri "/.git/config"] [unique_id "adkuNNSjn8_jBYOh2kfcxQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 160.250.130.12

🇺🇸 156.239.41.77

🇺🇸 129.121.102.3

🇮🇳 103.84.105.23

🇺🇸 35.243.150.249

🇺🇸 20.46.226.81

🇩🇪 2.26.64.64

🇺🇸 2604:a940:301:225:0:12::

🇧🇷 186.207.129.12

🇩🇪 157.90.174.226

🇸🇬 152.42.224.150

🇨🇳 111.26.101.77

🇨🇦 104.163.170.84

🇺🇸 103.101.203.155

🇳🇱 45.148.10.157

🇭🇰 43.128.60.40

🇿🇦 41.181.156.205

🇺🇸 2607:f8b0:4001:c17::12e

🇫🇷 207.180.236.46

🇨🇦 199.21.149.124