JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.119.38.50

135.119.38.50 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 44%: ?

44%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.119.38.50

Whois 135.119.38.50

IP Abuse Reports for 135.119.38.50:

This IP address has been reported a total of 33 times from 22 distinct sources. 135.119.38.50 was first reported on December 27th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-06-24 03:13:55 (2 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cp.cloudflare.com:80 show less	Open Proxy Port Scan
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇷🇸 Scan	2026-06-03 02:30:25 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-06-03 00:28:36 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 135.119.38.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 135.119.38.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 20:28:30.959341 2026] [security2:error] [pid 22459:tid 22459] [client 135.119.38.50:64718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.213"] [uri "/.git/HEAD"] [unique_id "ah91Lm6sgB6nnapY3YiX-gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 6kilowatti	2026-06-02 23:45:27 (3 weeks ago)	2026-06-03T02:45:27.129604+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-06-03T02:45:27.129604+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=135.119.38.50 DST=10.0.0.30 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=19672 DF PROTO=TCP SPT=65473 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-02 23:18:33 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 135.119.38.50 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 135.119.38.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 19:18:26.086536 2026] [security2:error] [pid 13237:tid 13237] [client 135.119.38.50:65196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.47"] [uri "/.git/config"] [unique_id "ah9kwhV92y4Cvb3ddZLGaAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RAP	2026-06-02 23:03:38 (3 weeks ago)	2026-06-02 23:03:38 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 ne1for23	2026-06-02 22:39:15 (3 weeks ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 135.119.38.50 - - [02/Jun/2026:22:39:14 +0000] "GET /.git/HEAD HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" show less	Hacking
🇱🇻 garmtech.com	2026-06-02 22:35:42 (3 weeks ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇺🇸 pduggusa	2026-05-19 03:52:51 (1 month ago)	Detected attacking dugganusa.com at 2026-05-19T03:52:51.400Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-05-19T03:52:51.400Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-19 02:39:32 (1 month ago)	Detected attacking dugganusa.com at 2026-05-19T02:39:32.366Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-05-19T02:39:32.366Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-19 01:37:20 (1 month ago)	Detected attacking dugganusa.com at 2026-05-19T01:37:20.491Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-05-19T01:37:20.491Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-19 00:35:38 (1 month ago)	Detected attacking dugganusa.com at 2026-05-19T00:35:38.525Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-05-19T00:35:38.525Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-18 05:41:00 (1 month ago)	Detected attacking dugganusa.com at 2026-05-18T05:40:59.142Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-05-18T05:40:59.142Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking
🇺🇸 pduggusa	2026-05-18 04:38:17 (1 month ago)	Detected attacking dugganusa.com at 2026-05-18T04:38:17.238Z \| Attack: Web Service \| Source: DugganU ... show more Detected attacking dugganusa.com at 2026-05-18T04:38:17.238Z \| Attack: Web Service \| Source: DugganUSA PreCog auto-block show less	Hacking

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 178.128.95.176

🇭🇰 114.111.52.109

🇫🇷 51.159.149.103

🇺🇸 44.92.130.66

🇺🇸 216.25.89.127

🇺🇸 216.25.89.125

🇭🇰 203.218.220.129

🇯🇵 203.25.124.185

🇨🇳 182.44.39.49

🇨🇳 120.53.2.123

🇨🇳 117.175.140.121

🇨🇳 113.249.157.2

🇮🇳 103.38.219.22

🇨🇦 85.217.149.56

🇦🇿 81.17.89.152

🇹🇷 78.190.161.14

🇪🇸 62.43.182.35

🇰🇷 59.152.168.184

🇺🇸 44.176.9.61

🇺🇸 20.29.49.134