JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.119.238.199

135.119.238.199 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 62%: ?

62%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.119.238.199

Whois 135.119.238.199

IP Abuse Reports for 135.119.238.199:

This IP address has been reported a total of 16 times from 14 distinct sources. 135.119.238.199 was first reported on September 29th 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2026-06-27 00:01:13 (4 days ago)	.env scanning [BY]	Web App Attack
Anonymous	2026-06-26 21:52:06 (4 days ago)	Reported from Nginx log analysis 6. Log: 135.119.238.199 - - [26/Jun/2026:xx:xx:xx 0200] "GET /.git ... show more Reported from Nginx log analysis 6. Log: 135.119.238.199 - - [26/Jun/2026:xx:xx:xx 0200] "GET /.git/config HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "-" "US United States Boydton" "AS8075" "Microsoft Corporation" show less	Port Scan Brute-Force SSH
🇧🇾 lns.bz	2026-06-26 21:38:32 (4 days ago)	Too many 404 requests [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 21:31:57 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 135.119.238.199 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 135.119.238.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 17:31:53.297150 2026] [security2:error] [pid 22179:tid 22179] [client 135.119.238.199:16770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.72"] [uri "/.git/HEAD"] [unique_id "aj7vyURjxmSnQQhkXFBgBwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 GabrielJST	2026-06-26 20:09:25 (4 days ago)	Port Scan detected from 135.119.238.199 (US/United States/-).	Port Scan
Anonymous	2026-06-26 19:37:22 (4 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇮🇪 AutosOnShow	2026-06-26 18:39:05 (4 days ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-06-26 18:38:03.776 \|	Web App Attack
🇺🇸 xmission.com	2026-06-16 15:24:24 (2 weeks ago)	Blocked by UFW (TCP on 2078) Source port: 2051 TTL: 48 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 2078) Source port: 2051 TTL: 48 Packet length: 60 TOS: 0x00 This report (for 135.119.238.199) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-16 14:27:39 (2 weeks ago)	Blocked by UFW on MVI [443/tcp] \| SPT: 1833 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on MVI [443/tcp] \| SPT: 1833 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 Blinker73	2026-06-16 13:55:41 (2 weeks ago)	2026-06-16T09:55 kernel: OUT= SRC=135.119.238.199 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=50287 DF ... show more 2026-06-16T09:55 kernel: OUT= SRC=135.119.238.199 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=50287 DF PROTO=TCP SPT=1225 DPT=2078 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-16T09:55 kernel: OUT= SRC=135.119.238.199 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=6707 DF PROTO=TCP SPT=1237 DPT=2086 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-16T09:55 kernel: OUT= SRC=135.119.238.199 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=10793 DF PROTO=TCP SPT=1237 DPT=2077 WINDOW=64240 RES=0x00 SYN URGP= show less	Port Scan
🇩🇪 bsoft.de	2026-06-16 13:22:47 (2 weeks ago)	135.119.238.199 - - [16/Jun/2026:15:22:46 +0200] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozill ... show more 135.119.238.199 - - [16/Jun/2026:15:22:46 +0200] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" show less	Bad Web Bot Web App Attack
🇫🇷 sbocquet	2026-06-16 13:14:23 (2 weeks ago)	Port 443 scanned from 135.119.238.199:1823.	Port Scan
🇺🇸 mw	2026-05-21 00:00:53 (1 month ago)	GET /poc.jsp?cmd=cat+%2Fetc%2Fpasswd HTTP/1.1	Web App Attack
🇺🇸 Rayulcifer	2026-04-17 13:13:05 (2 months ago)	135.119.238.199 - - [17/Apr/2026:08:13:04 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 502 488 "-" "- ... show more 135.119.238.199 - - [17/Apr/2026:08:13:04 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 502 488 "-" "-" 135.119.238.199 - - [17/Apr/2026:08:13:04 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 502 488 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 Rayulcifer	2026-03-26 12:48:50 (3 months ago)	135.119.238.199 - - [26/Mar/2026:07:44:14 -0500] "CONNECT axolot.fun:443 HTTP/1.1" 502 488 "-" "Go-h ... show more 135.119.238.199 - - [26/Mar/2026:07:44:14 -0500] "CONNECT axolot.fun:443 HTTP/1.1" 502 488 "-" "Go-http-client/1.1" 135.119.238.199 - - [26/Mar/2026:07:48:49 -0500] "CONNECT axolot.fun:443 HTTP/1.1" 502 488 "-" "Go-http-client/1.1" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 203.121.40.210

🇹🇼 198.235.24.115

🇺🇸 161.35.103.94

🇬🇧 195.206.182.221

🇩🇪 194.88.98.83

🇺🇸 162.216.149.206

🇸🇻 138.97.142.254

🇮🇩 110.138.131.48

🇫🇷 91.231.89.239

🇱🇻 91.218.143.193

🇸🇬 47.245.98.98

🇺🇸 9.234.151.16

🇺🇸 3.220.236.32

🇨🇦 205.250.25.62

🇧🇷 205.210.31.253

🇺🇸 184.105.139.86

🇬🇧 154.16.44.161

🇮🇳 117.248.201.39

🇱🇹 81.30.98.142

🇺🇸 65.49.1.62