JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 20.109.38.50

20.109.38.50 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 47%: ?

47%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 20.109.38.50

Whois 20.109.38.50

IP Abuse Reports for 20.109.38.50:

This IP address has been reported a total of 23 times from 20 distinct sources. 20.109.38.50 was first reported on September 14th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇷🇺 Andrey I	2026-06-03 04:25:00 (3 weeks ago)	ddos	DDoS Attack Port Scan
🇧🇷 SOC Blue Team	2026-06-03 03:26:00 (3 weeks ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇺🇸 technash	2026-06-03 03:25:00 (3 weeks ago)	Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.	Port Scan
🇺🇸 TPI-Abuse	2026-06-03 02:03:00 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 20.109.38.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.109.38.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 22:02:52.804332 2026] [security2:error] [pid 16449:tid 16449] [client 20.109.38.50:20290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.6"] [uri "/.git/HEAD"] [unique_id "ah-LTNY7j57NYEXyLGQSIgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-03 01:58:26 (3 weeks ago)	Blocked by UFW (TCP on 443) Source port: 20748 TTL: 51 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 20748 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 20.109.38.50) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇷🇸 Scan	2026-06-03 01:42:20 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇲🇩 t123troy	2026-06-03 01:10:56 (3 weeks ago)	FRIDAY Sovereign Security: SSH brute force + AI-powered attack agent detected. UNKNOWN:mozilla/5.0 ( ... show more FRIDAY Sovereign Security: SSH brute force + AI-powered attack agent detected. UNKNOWN:mozilla/5.0 (macintosh; intel mac os x 14.4; rv:12. Session: unknown show less	Brute-Force SSH Port Scan
🇺🇸 MPL	2026-06-02 23:52:02 (3 weeks ago)	tcp port scan (9 or more attempts)	Port Scan
🇫🇷 dynamix	2026-06-02 23:51:18 (3 weeks ago)	Multiple WAF Violations	Web App Attack
🇬🇧 PeravixGroup	2026-06-02 23:41:44 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-06-02 23:39:34 (3 weeks ago)	[Tue Jun 02 16:39:28.429718 2026] [authz_core:error] [pid 1517254] [client 20.109.38.50:20307] AH016 ... show more [Tue Jun 02 16:39:28.429718 2026] [authz_core:error] [pid 1517254] [client 20.109.38.50:20307] AH01630: client denied by server configuration: /home/appowner/www/sec/.git [Tue Jun 02 16:39:31.764688 2026] [authz_core:error] [pid 1517253] [client 20.109.38.50:20290] AH01630: client denied by server configuration: /home/appowner/www/sec/.env.local [Tue Jun 02 16:39:32.370223 2026] [authz_core:error] [pid 1517285] [client 20.109.38.50:20299] AH01630: client denied by server configuration: /home/appowner/www/sec/.env.production [Tue Jun 02 16:39:33.279621 2026] [authz_core:error] [pid 1517256] [client 20.109.38.50:20311] AH01630: client denied by server configuration: /home/appowner/www/sec/.env.backup [Tue Jun 02 16:39:33.807166 2026] [authz_core:error] [pid 1517732] [client 20.109.38.50:19537] AH01630: client denied by server configuration: /home/appowner/www/sec/.env.save ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-06-02 23:39:02 (3 weeks ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-05-26 03:05:34 (1 month ago)	Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=19	Hacking
🇺🇸 TPI-Abuse	2026-05-26 03:00:19 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 20.109.38.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 20.109.38.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 23:00:11.957541 2026] [security2:error] [pid 15890:tid 15890] [client 20.109.38.50:52289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jasbemarketing.com"] [uri "/.env"] [unique_id "ahUMu849fh3ZtJLnRq6hRwAAAAE"], referer: https://www.google.com/search?q= show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 178.20.210.208

🇸🇬 165.154.29.144

🇳🇱 91.92.40.12

🇧🇬 79.124.62.126

🇺🇸 52.188.86.150

🇳🇱 45.148.10.152

🇻🇪 200.44.190.194

🇸🇬 188.166.223.76

🇨🇳 118.145.237.236

🇮🇩 103.112.5.7

🇿🇦 197.90.194.69

🇮🇹 151.81.44.125

🇯🇵 114.154.187.76

🇮🇳 103.38.219.22

🇵🇱 78.159.89.46

🇰🇷 43.155.237.241

🇩🇪 213.209.159.242

🇺🇸 167.253.19.43

🇩🇪 167.94.145.19

🇨🇳 123.160.221.157