188.212.135.240

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
39% Elevated
40 reports
32 reporters · latest 2 days ago
ISP
VPN Consumer Warsaw, Poland
Usage Type
Data Center/Web Hosting/Transit
ASN
AS206092
Domain Name
vpnconsumer.com
Country
🇵🇱 Poland
City
Warsaw, Mazovia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
40 from 32 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇺🇸 United States of America 4 🇫🇷 France 3
Most common categories Web App Attack 12 Port Scan 5 Hacking 5 Bad Web Bot 4 Brute-Force 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 6 application-level events across 3 source port(s). Sensor(s): RDPHoneypot.
Port Scan
🇺🇸 fortypoundhead
Banned IP Address
Hacking Web App Attack
🇳🇱 Lentini
visuitslagen.nl: malicious request:/archivarix.cms.php
Web App Attack
🇨🇭 backslash
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸 technojoe99
Exploit scan from 188.212.135.240. GET /archivarix.cms.php HTTP/1.1.
Web App Attack
🇫🇷 solution.it
[Sun Sep 27 10:31:37.429669 2026] [php7:error] [pid 2373870:tid 2373870] [client 188.212.135.240:57101] script '/var/www/html/ufficioprivacy.it/archivarix.cms.php' not found or unable to stat
Web App Attack
🇫🇷 masterguru
(modsec_5015) ModSec 5015: Suspicious User-Agent from 188.212.135.240 (PL/Poland/-): 1 in the last 3600 secs (0-196)
Hacking
🇬🇧 abivia
Abivia WAF trigger: Rule staticSite: Request PHP file on a static site. uri: /archivarix.cms.php
Hacking Web App Attack
🇩🇪 v1nc
188.212.135.240 - - [22/Sep/2026:08:52:30 +0000] "GET / HTTP/1.1" 200 432 "https://heinen.wedding/archivarix.cms.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" ...
Hacking
🇺🇸 LSPCCU
DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
Anonymous
Automated report (2026-09-21T19:37:00-04:00). Scraper detected.
Bad Web Bot Open Proxy VPN IP
Anonymous
Unauthorized access (443/tcp/https)
Port Scan Web App Attack
🇬🇧 gigatech
Webserver Probing
Web App Attack
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.39
🇹🇷 185.231.227.225
🇭🇰 165.154.69.238
🇳🇱 45.148.10.246
🇺🇸 216.213.8.84
🇺🇸 185.98.169.3
🇵🇱 172.64.198.238
🇵🇾 170.245.132.82
🇩🇿 154.252.110.115
🇻🇳 119.17.213.122
🇦🇺 101.183.78.49
🇺🇸 87.87.167.218
🇪🇸 84.232.60.18
🇷🇴 80.94.92.234
🇨🇦 74.57.105.138
🇺🇸 65.49.1.90
🇺🇸 47.254.31.207
🇺🇸 35.238.129.244
🇨🇦 24.200.197.102
🇳🇱 213.209.159.226
feedback