JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 137.135.86.50

137.135.86.50

Neutral Activity

68 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corp

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇺🇸 United States of America

City

Dulles Town Center, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

137.135.86.50 has been reported 68 times. The most recent report is from 5 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 137.135.86.50:

This IP address has been reported a total of 68 times from 12 distinct sources. 137.135.86.50 was first reported on March 1st 2021, and the most recent report was 5 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2021-05-02 09:35:54 (5 years ago)	$f2bV_matches	Brute-Force
🇹🇭 Sawasdee	2021-04-30 04:33:04 (5 years ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇲🇾 syokadmin	2021-04-29 23:28:43 (5 years ago)	(mod_security) mod_security (id:949110) triggered by 137.135.86.50 (US/United States/-): 1 in the la ... show more (mod_security) mod_security (id:949110) triggered by 137.135.86.50 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force
🇺🇸 HJ5Ss4Ju	2021-04-29 07:04:48 (5 years ago)	Forbidden directory scan :: 2021/04/29 11:04:47 [error] 46499#46499: 1045218 access forbidden by ru ... show more Forbidden directory scan :: 2021/04/29 11:04:47 [error] 46499#46499: 1045218 access forbidden by rule, client: 137.135.86.50, server: [censored_2], request: "GET //.env HTTP/1.1", host: "www.[censored_2]" show less	Hacking
Anonymous	2021-04-29 01:44:30 (5 years ago)	$f2bV_matches	Web App Attack
🇺🇸 HJ5Ss4Ju	2021-04-29 00:14:32 (5 years ago)	Forbidden directory scan :: 2021/04/29 04:14:32 [error] 46499#46499: 1033748 access forbidden by ru ... show more Forbidden directory scan :: 2021/04/29 04:14:32 [error] 46499#46499: 1033748 access forbidden by rule, client: 137.135.86.50, server: [censored_2], request: "GET //.env HTTP/1.1", host: "www.[censored_2]" show less	Hacking
🇲🇾 syokadmin	2021-04-28 22:37:19 (5 years ago)	(mod_security) mod_security (id:949110) triggered by 137.135.86.50 (US/United States/-): 1 in the la ... show more (mod_security) mod_security (id:949110) triggered by 137.135.86.50 (US/United States/-): 1 in the last 3600 secs show less	Brute-Force
🇮🇪 netfactotum	2021-04-28 22:00:08 (5 years ago)		Hacking Bad Web Bot Exploited Host Web App Attack
🇮🇩 hermawan	2021-04-28 21:24:06 (5 years ago)	[Thu Apr 29 08:24:04.637314 2021] [:error] [pid 9031:tid 140504035419904] [client 137.135.86.50:4999 ... show more [Thu Apr 29 08:24:04.637314 2021] [:error] [pid 9031:tid 140504035419904] [client 137.135.86.50:49992] [client 137.135.86.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/.env"] [unique_id "YIoKtNGo4HP4BZixy7fldQAAAGk"] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-04-28 15:08:48 (5 years ago)	[Thu Apr 29 02:08:46.144589 2021] [:error] [pid 3481:tid 140595033519872] [client 137.135.86.50:5827 ... show more [Thu Apr 29 02:08:46.144589 2021] [:error] [pid 3481:tid 140595033519872] [client 137.135.86.50:58279] [client 137.135.86.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/.env"] [unique_id "YImyvi0Q4lQ9reMoL7bCzwAAALE"] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-04-28 09:20:07 (5 years ago)	[Wed Apr 28 20:20:06.164310 2021] [:error] [pid 1508:tid 140297581356800] [client 137.135.86.50:5636 ... show more [Wed Apr 28 20:20:06.164310 2021] [:error] [pid 1508:tid 140297581356800] [client 137.135.86.50:56362] [client 137.135.86.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/.env"] [unique_id "YIlhBvzC5YrWtde9y6kqWwAAALM"] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-04-28 08:17:11 (5 years ago)	[Wed Apr 28 19:17:09.598405 2021] [:error] [pid 25740:tid 139652052379392] [client 137.135.86.50:644 ... show more [Wed Apr 28 19:17:09.598405 2021] [:error] [pid 25740:tid 139652052379392] [client 137.135.86.50:64432] [client 137.135.86.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/.env"] [unique_id "YIlSRQ2M2OY1c1bSVWrwSAAAACQ"] ... show less	Hacking Web App Attack
🇩🇪 Dave1680	2021-04-27 09:55:11 (5 years ago)	Searching for vulnerabilities, trying to access [.env]	Hacking Web App Attack
🇮🇩 hermawan	2021-04-26 08:52:10 (5 years ago)	[Mon Apr 26 19:52:07.836256 2021] [:error] [pid 12419:tid 139877181765376] [client 137.135.86.50:505 ... show more [Mon Apr 26 19:52:07.836256 2021] [:error] [pid 12419:tid 139877181765376] [client 137.135.86.50:50519] [client 137.135.86.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/.env"] [unique_id "YIa3dxiCB9zZ-nq@szsULQAAACY"] ... show less	Hacking Web App Attack
🇮🇩 hermawan	2021-04-26 05:39:27 (5 years ago)	[Mon Apr 26 16:39:25.884539 2021] [:error] [pid 30120:tid 140533455308544] [client 137.135.86.50:570 ... show more [Mon Apr 26 16:39:25.884539 2021] [:error] [pid 30120:tid 140533455308544] [client 137.135.86.50:57092] [client 137.135.86.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/.env"] [unique_id "YIaKTfe2Ig9PbgvaoSEIugAAAYI"] ... show less	Hacking Web App Attack

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇲 103.59.163.132

🇺🇸 209.141.47.217

🇬🇧 193.163.125.66

🇲🇽 187.187.231.156

🇰🇷 175.198.62.180

🇺🇸 172.203.212.71

🇷🇺 95.64.219.174

🇪🇸 2.59.246.36

🇺🇸 204.12.242.211

🇩🇪 194.187.176.162

🇨🇴 191.97.12.90

🇺🇸 162.241.149.132

🇺🇸 162.241.43.213

🇧🇷 153.67.107.239

🇵🇰 103.166.103.144

🇬🇦 102.142.20.178

🇷🇺 95.139.235.39

🇺🇸 66.132.172.209

🇺🇸 54.89.90.224

🇧🇪 34.62.88.186