JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

40.114.36.50

Recent Activity

Abuse Confidence Score

100% Critical

110 reports

98 reporters · latest 25 minutes ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

110 from 98 distinct reporters

First reported

November 7th 2026

Most recent report

25 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 27 🇺🇸 United States of America 23 🇫🇷 France 10

Most common categories Web App Attack 71 Bad Web Bot 28 Brute-Force 19 Hacking 14 Port Scan 13

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jack252	2026-11-08 06:46:56 UTC · (25 minutes ago)	autoconfig.0xfc.de 40.114.36.50 - - [08/Nov/2026:07:39:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "POST / HTTP/1.1" 404 31 "https://autoconfig.0xfc.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0. ... show more autoconfig.0xfc.de 40.114.36.50 - - [08/Nov/2026:07:39:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "POST / HTTP/1.1" 404 31 "https://autoconfig.0xfc.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" autoconfig.0xfc.de 40.114.36.50 - - [08/Nov/2026:07:39:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "POST / HTTP/1.1" 404 31 "https://autoconfig.0xfc.de/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" autoconfig.0xfc.de 40.114.36.50 - - [08/Nov/2026:07:39:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "POST / HTTP/1.1" 404 31 "https://autoconfig.0xfc.de/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" autoconfig.0xfc.de 40.114.36.50 - - [08/Nov/2026:07:39:18 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "POST / HTTP/1.1" 404 31 "https://autoconfig.0xfc.de/" "Mozilla/5.0 (Macintosh; Intel Mac OS X ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-08 06:43:31 UTC · (28 minutes ago)	This IP was detected by CrowdSec triggering local/abuseipdb-watchlist	Port Scan
🇫🇷 Zundapper	2026-11-08 06:41:03 UTC · (31 minutes ago)	40.114.36.50 - - [08/Nov/2026:07:40:55 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.cncstep.it/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/ ... show more 40.114.36.50 - - [08/Nov/2026:07:40:55 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.cncstep.it/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/2026:07:40:55 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.cncstep.it/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/2026:07:40:55 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.cncstep.it/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/2026:07:40:55 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.cncstep.it/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/2026:07:41:02 +0100] "POST / HTTP/1.1" 404 548 "https://autoconfig.cosedagatto.it/" "Mo ... show less	Web App Attack Port Scan
🇫🇮 botwork.se	2026-11-08 06:38:21 UTC · (34 minutes ago)	{"level":"info","ts":"2026-11-08T06:38:19Z","logger":"http.log.access.log8","msg":"handled request","request":{"remote_ip":"40.114.36.50","remote_port":"43310","client_ip":"40.114.36.50","proto":"HTTP/1.1","method":"POST","host":"authentik.botwork.se ... show more {"level":"info","ts":"2026-11-08T06:38:19Z","logger":"http.log.access.log8","msg":"handled request","request":{"remote_ip":"40.114.36.50","remote_port":"43310","client_ip":"40.114.36.50","proto":"HTTP/1.1","method":"POST","host":"authentik.botwork.se","uri":"/","headers":{"Sec-Fetch-Dest":["empty"],"Content-Type":["multipart/form-data; boundary=WebKitFormBoundaryly9ondUfkssFP9D6ReWNXhj"],"Sec-Ch-Ua":["\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\""],"Accept-Language":["en-US;q=1.0, en;q=0.9"],"Referer":["https://authentik.botwork.se/"],"Sec-Fetch-Mode":["cors"],"Next-Action":["a4b567afc2ff4d4971abbd898ad5bb53b703aedd"],"Sec-Ch-Ua-Platform":["\"macOS\""],"Content-Length":["14121"],"Sec-Fetch-Site":["same-origin"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Priority":["u=0, i"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,a ... show less	Web App Attack
🇨🇭 dalslab ltd	2026-11-08 06:38:11 UTC · (34 minutes ago)	[08/Nov/2026:07:38:09 +0100] - 403 403 - POST https auth.dalslab.com "/" [Client 40.114.36.50] [Length 748] [Gzip -] [Sent-to 10.1.1.240] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 ... show more [08/Nov/2026:07:38:09 +0100] - 403 403 - POST https auth.dalslab.com "/" [Client 40.114.36.50] [Length 748] [Gzip -] [Sent-to 10.1.1.240] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "https://auth.dalslab.com/" [08/Nov/2026:07:38:10 +0100] - 403 403 - POST https auth.dalslab.com "/" [Client 40.114.36.50] [Length 748] [Gzip -] [Sent-to 10.1.1.240] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "https://auth.dalslab.com/" [08/Nov/2026:07:38:10 +0100] - 403 403 - POST https auth.dalslab.com "/" [Client 40.114.36.50] [Length 748] [Gzip -] [Sent-to 10.1.1.240] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "https://auth.dalslab.com/" [08/Nov/2026:07:38:10 +0100] - 403 403 - POST https auth.dalslab.com "/" [Client 40.114.36.50] [Length 748] [Gzip -] [Sent-to 10.1.1.240] "Mozilla/5 ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-08 06:34:38 UTC · (37 minutes ago)	Automated report: 1 malicious HTTP request(s) blocked by WAF/IPS on public web services. Requested: /	Web App Attack
🇺🇸 HamSammich	2026-11-08 06:21:54 UTC · (50 minutes ago)	Automated sensor: 8 HTTPS connection/probe attempts over the last 24h (latest 2026-11-08T06:21Z).	Port Scan Web App Attack
Anonymous	2026-11-08 06:16:12 UTC · (56 minutes ago)	[Sun Nov 08 06:16:11.425897 2026] [authz_core:error] [pid 71625:tid 71684] [client 40.114.36.50:52814] AH01630: client denied by server configuration: /srv/www/erp.alien.net.au/htdocs/, referer: https://api.erp.alien.net.au/ [Sun Nov 08 06:16:11.5270 ... show more [Sun Nov 08 06:16:11.425897 2026] [authz_core:error] [pid 71625:tid 71684] [client 40.114.36.50:52814] AH01630: client denied by server configuration: /srv/www/erp.alien.net.au/htdocs/, referer: https://api.erp.alien.net.au/ [Sun Nov 08 06:16:11.527002 2026] [authz_core:error] [pid 71625:tid 71677] [client 40.114.36.50:52814] AH01630: client denied by server configuration: /srv/www/erp.alien.net.au/htdocs/, referer: https://api.erp.alien.net.au/ [Sun Nov 08 06:16:11.636098 2026] [authz_core:error] [pid 71625:tid 71698] [client 40.114.36.50:52814] AH01630: client denied by server configuration: /srv/www/erp.alien.net.au/htdocs/, referer: https://api.erp.alien.net.au/ [Sun Nov 08 06:16:11.737883 2026] [authz_core:error] [pid 71625:tid 71683] [client 40.114.36.50:52814] AH01630: client denied by server configuration: /srv/www/erp.alien.net.au/htdocs/, referer: https://api.erp.alien.net.au/ [Sun Nov 08 06:16:11.858687 2026] [authz_core:error] [pid 71625:tid 71693] [client 40.114.36.50:5281 ... show less	Brute-Force
🇺🇸 Vano Ganzzz	2026-11-08 06:14:46 UTC · (57 minutes ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (POST method) Endpoint: / Timestamp: 2026-11-08T06:14:46Z Ray ID: a572707cf99f13c9 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (POST method) Endpoint: / Timestamp: 2026-11-08T06:14:46Z Ray ID: a572707cf99f13c9 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 Ribeye375	2026-11-08 06:04:19 UTC · (1 hour ago)	HIPS nginx-anti-botnet - Block tcp/0:65535	Bad Web Bot
🇫🇮 000rosiu	2026-11-08 05:56:42 UTC · (1 hour ago)	Triggered Cloudflare WAF (botFight) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (POST) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 • Generated by: git ... show more Triggered Cloudflare WAF (botFight) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (POST) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-11-08 05:48:41 UTC · (1 hour ago)	40.114.36.50 - - [08/Nov/2026:14:48:39 +0900] "POST / HTTP/1.1" 403 4675 "https://admin.lifeway.jp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/2026:14:48 ... show more 40.114.36.50 - - [08/Nov/2026:14:48:39 +0900] "POST / HTTP/1.1" 403 4675 "https://admin.lifeway.jp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/2026:14:48:39 +0900] "POST / HTTP/1.1" 403 505 "https://admin.lifeway.jp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/2026:14:48:39 +0900] "POST / HTTP/1.1" 403 505 "https://admin.lifeway.jp/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/2026:14:48:40 +0900] "POST / HTTP/1.1" 403 505 "https://admin.lifeway.jp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 40.114.36.50 - - [08/Nov/2026:14:48:40 +0900] "POST / HTTP/1.1" 403 505 "https://admin.lifeway.jp/" "Mozilla/5.0 (Windows NT 10.0; Win64; ... show less	Brute-Force
🇺🇸 Thermogenic	2026-11-08 05:46:49 UTC · (1 hour ago)	Fail2Ban nginx-deny: denied web request detected	Web App Attack
🇧🇪 taivas.nl	2026-11-08 05:32:36 UTC · (1 hour ago)	Many_bad_calls	Web App Attack
🇺🇸 Rip	2026-11-08 05:08:28 UTC · (2 hours ago)	Remote Command Execution - Unix Shell Expression Found in URI	Web App Attack

Showing 1 to 15 of 110 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 219.248.4.146

🇨🇳 218.78.132.164

🇵🇱 172.64.198.148

🇵🇱 172.64.198.113

🇭🇰 118.193.33.130

🇺🇸 72.202.228.45

🇧🇩 37.111.207.115

🇬🇧 35.203.210.186

🇺🇦 31.128.189.107

🇬🇧 5.226.140.116

🇧🇷 169.150.198.73

🇨🇳 123.160.223.73

🇺🇸 91.230.168.244

🇺🇸 70.183.157.83

🇮🇳 49.207.32.50

🇺🇸 48.217.235.68

🇪🇸 46.35.117.110

🇧🇪 35.210.23.62

🇬🇧 35.203.211.198

🇧🇷 200.222.71.218