JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.135.38.50

5.135.38.50 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 57%: ?

57%

ISP	Ovh Hosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	gwc.cluster111.hosting.ovh.net
Domain Name	ovh.net
Country	🇫🇷 France
City	Lille, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.135.38.50

Whois 5.135.38.50

IP Abuse Reports for 5.135.38.50:

This IP address has been reported a total of 71 times from 40 distinct sources. 5.135.38.50 was first reported on October 9th 2025, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-03 12:04:44 (22 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2026-07-02 12:02:03 (1 day ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2026-07-01 05:57:23 (3 days ago)	WordPress Brute Force	Brute-Force
🇩🇪 ger-stg-sifi1	2026-06-30 18:31:41 (3 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 15:23:27 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 11:23:19.588223 2026] [security2:error] [pid 3769:tid 3769] [client 5.135.38.50:42340] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.babylontravelone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.babylontravelone.com"] [uri "/wp-json/wp/v2/users/10"] [unique_id "akE8Z32y_CW7i7sxrLe55wAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 10:39:39 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 06:39:36.014550 2026] [security2:error] [pid 12306:tid 12306] [client 5.135.38.50:38270] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|daebakdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daebakdesign.com"] [uri "/wp-json/wp/v2/users/5"] [unique_id "akD56B-jg4TDXYHf_3flsAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 07:34:50 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 03:34:46.766186 2026] [security2:error] [pid 13750:tid 13775] [client 5.135.38.50:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.mindgardens.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mindgardens.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akDOlmIzFlXPAVVS54unvQAAAJY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 22:16:03 (6 days ago)	(mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 18:15:58.077963 2026] [security2:error] [pid 29165:tid 29165] [client 5.135.38.50:40232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|meganmurph.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "meganmurph.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "akBLniE3-ZN2BShIQWHCTQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-06-26 22:01:17 (1 week ago)	wp-login attack [26/Jun/2026:20:07:58	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-06-26 09:39:22 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 04:20:27 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 ... show more (mod_security) mod_security (id:225170) triggered by 5.135.38.50 (gwc.cluster111.hosting.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 00:20:20.603273 2026] [security2:error] [pid 27049:tid 27049] [client 5.135.38.50:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ac.cloudex.click\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ac.cloudex.click"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aj3-BHK9tw2_XsUJfj92PwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ptlab	2026-06-20 10:45:03 (1 week ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇫🇷 masterguru	2026-06-17 00:20:18 (2 weeks ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 5.135.38.50 (DE/Germany/gwc.cluster111.hostin ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 5.135.38.50 (DE/Germany/gwc.cluster111.hosting.ovh.net): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 RLDD	2026-06-11 10:59:25 (3 weeks ago)	WP probing for vulnerabilities -nov	Web App Attack
🇮🇹 VHosting	2026-06-09 08:32:20 (3 weeks ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.105.247.208

🇨🇳 182.244.0.150

🇿🇦 105.245.118.91

🇰🇪 102.210.42.234

🇺🇸 72.58.83.92

🇨🇳 60.16.209.172

🇨🇳 60.16.209.138

🇻🇳 59.153.220.221

🇺🇸 52.207.196.234

🇧🇾 46.53.246.23

🇬🇧 44.131.70.92

🇨🇳 220.154.133.166

🇬🇧 195.206.182.201

🇧🇷 179.83.134.101

🇪🇨 177.53.214.136

🇧🇷 138.186.109.219

🇮🇳 103.70.40.36

🇿🇦 102.37.220.188

🇺🇸 98.44.6.74

🇺🇸 97.180.52.50