This IP address has been reported a total of
41
times from
35 distinct
sources.
13.231.108.48 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Malicious User-Agent
show less
Bad Web Bot
Web App Attack
Anonymous
(PERMBLOCK) 13.231.108.48 (JP/Japan/ec2-13-231-108-48.ap-northeast-1.compute.amazonaws.com) has had ...
show more(PERMBLOCK) 13.231.108.48 (JP/Japan/ec2-13-231-108-48.ap-northeast-1.compute.amazonaws.com) has had more than 4 temp blocks in the last 86400 secs; IP: 13.231.108.48; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
(wordpress-404) Searching for non-existent wordpress installs from 13.231.108.48 (JP/Japan/Tokyo/Tok ...
show more(wordpress-404) Searching for non-existent wordpress installs from 13.231.108.48 (JP/Japan/Tokyo/Tokyo/ec2-13-231-108-48.ap-northeast-1.compute.amazonaws.com/[redacted])
show less
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: JP, Attack patterns: WordPress scanning, Malicious User-Agent
show less
05/27/2026-10:57:11.974791 13.231.108.48 Protocol: 6 ET SCAN WordPress Scanner Performing Multiple R ...
show more05/27/2026-10:57:11.974791 13.231.108.48 Protocol: 6 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML
show less
(xmlrpc) Apache: Failed xmlrpc access from 13.231.108.48 (JP/Japan/ec2-13-231-108-48.ap-northeast-1. ...
show more(xmlrpc) Apache: Failed xmlrpc access from 13.231.108.48 (JP/Japan/ec2-13-231-108-48.ap-northeast-1.compute.amazonaws.com): 10 in the last 3600 secs (0-201)
show less
Hacking
Anonymous
Bot / scanning and/or hacking attempts: GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1, GET /wp2/wp- ...
show moreBot / scanning and/or hacking attempts: GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1, GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1, GET /news/wp-includes/wlwmanifest.xml HTTP/1.1, GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1, GET /website/wp-includes/wlwmanifest.xml HTTP/1.1, GET /wp-includes/wlwmanifest.xml HTTP/1.1, GET /site/wp-includes/wlwmanifest.xml HTTP/1.1, GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1, GET /xmlrpc.php?rsd HTTP/1.1, GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1, GET /test/wp-includes/wlwmanifest.xml HTTP/1.1, GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1
show less
(mod_security) mod_security (id:210410) triggered by 13.231.108.48 (JP/Japan/ec2-13-231-108-48.ap-no ...
show more(mod_security) mod_security (id:210410) triggered by 13.231.108.48 (JP/Japan/ec2-13-231-108-48.ap-northeast-1.compute.amazonaws.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
Showing 1 to
15
of 41 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩