AbuseIPDB » 13.66.139.57

Check an IP Address, Domain Name, or Subnet

e.g. 18.232.53.118, microsoft.com, or 5.188.10.0/24

13.66.139.57 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 45%: ?

45%

ISP	Microsoft Corporation
Usage Type	Search Engine Spider
Hostname(s)	msnbot-13-66-139-57.search.msn.com
Domain Name	microsoft.com
Country	United States of America
City	Redmond, Washington

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 13.66.139.57

Whois 13.66.139.57

IP Abuse Reports for 13.66.139.57:

This IP address has been reported a total of 139 times from 22 distinct sources. 13.66.139.57 was first reported on November 24th 2020, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
MageHost.pro	19 Apr 2021	15 attempts against mh-modsecurity-ban on drop	Brute-Force Web App Attack
Unwasted	19 Apr 2021	Blocked IP still knocking	Hacking
MageHost.pro	17 Apr 2021	15 attempts against mh-modsecurity-ban on drop	Brute-Force Web App Attack
hermawan	14 Apr 2021	[Wed Apr 14 13:34:19.865562 2021] [:error] [pid 575:tid 139981854799616] [client 13.66.139.57:45568] ... show more[Wed Apr 14 13:34:19.865562 2021] [:error] [pid 575:tid 139981854799616] [client 13.66.139.57:45568] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "YHaM65QVDE0A4xSH-doj0AAAaQQ"] ... show less	Hacking Web App Attack
hermawan	13 Apr 2021	[Tue Apr 13 20:14:07.199357 2021] [:error] [pid 436:tid 139770656462592] [client 13.66.139.57:46976] ... show more[Tue Apr 13 20:14:07.199357 2021] [:error] [pid 436:tid 139770656462592] [client 13.66.139.57:46976] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/295-prakiraan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau-di-propinsi-jawa-timur"] [unique_id "YHWZH4jR1MzDK3gScNkOTAAAawY"] ... show less	Hacking Web App Attack
hermawan	13 Apr 2021	[Tue Apr 13 13:11:07.175071 2021] [:error] [pid 5402:tid 139840648361728] [client 13.66.139.57:62144 ... show more[Tue Apr 13 13:11:07.175071 2021] [:error] [pid 5402:tid 139840648361728] [client 13.66.139.57:62144] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "[email protected]"] ... show less	Hacking Web App Attack
hermawan	12 Apr 2021	[Tue Apr 13 01:57:02.691645 2021] [:error] [pid 3930:tid 139978885117696] [client 13.66.139.57:63232 ... show more[Tue Apr 13 01:57:02.691645 2021] [:error] [pid 3930:tid 139978885117696] [client 13.66.139.57:63232] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "YHSX-nuKRkkPFfg3-3suqgAAagE"] ... show less	Hacking Web App Attack
hermawan	12 Apr 2021	[Mon Apr 12 16:01:00.183057 2021] [:error] [pid 19180:tid 139768017340160] [client 13.66.139.57:6412 ... show more[Mon Apr 12 16:01:00.183057 2021] [:error] [pid 19180:tid 139768017340160] [client 13.66.139.57:64128] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "YHQMTPV6rrBfCcLaKrlL5gAAswU"] ... show less	Hacking Web App Attack
hermawan	11 Apr 2021	[Mon Apr 12 04:52:47.417538 2021] [:error] [pid 14283:tid 140072400529152] [client 13.66.139.57:6457 ... show more[Mon Apr 12 04:52:47.417538 2021] [:error] [pid 14283:tid 140072400529152] [client 13.66.139.57:64576] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/295-prakiraan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau-di-propinsi-jawa-timur"] [unique_id "YHNvr5yEiDDQUiZEFhowigABhQY"] ... show less	Hacking Web App Attack
hermawan	10 Apr 2021	[Sat Apr 10 17:15:26.262529 2021] [:error] [pid 546:tid 140661827270400] [client 13.66.139.57:51520] ... show more[Sat Apr 10 17:15:26.262529 2021] [:error] [pid 546:tid 140661827270400] [client 13.66.139.57:51520] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir"] [unique_id "YHF6vgOzh5Fa-OFLWaZngAAAJgY"] ... show less	Hacking Web App Attack
hermawan	09 Apr 2021	[Fri Apr 09 15:08:54.792400 2021] [:error] [pid 21097:tid 140306791307008] [client 13.66.139.57:4601 ... show more[Fri Apr 09 15:08:54.792400 2021] [:error] [pid 21097:tid 140306791307008] [client 13.66.139.57:46016] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "YHALlpgZh7pbgA-DGkcvuwAAswY"] ... show less	Hacking Web App Attack
hermawan	08 Apr 2021	[Fri Apr 09 01:26:22.800750 2021] [:error] [pid 8675:tid 140507668358912] [client 13.66.139.57:62976 ... show more[Fri Apr 09 01:26:22.800750 2021] [:error] [pid 8675:tid 140507668358912] [client 13.66.139.57:62976] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir"] [unique_id "YG9KzoK4Aylp6VTKCEScEAABPAY"] ... show less	Hacking Web App Attack
hermawan	08 Apr 2021	[Fri Apr 09 00:24:20.432120 2021] [:error] [pid 24554:tid 140389731497728] [client 13.66.139.57:6387 ... show more[Fri Apr 09 00:24:20.432120 2021] [:error] [pid 24554:tid 140389731497728] [client 13.66.139.57:63872] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/295-prakiraan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau-di-propinsi-jawa-timur"] [unique_id "[email protected]"] ... show less	Hacking Web App Attack
hermawan	08 Apr 2021	[Thu Apr 08 22:00:38.457656 2021] [:error] [pid 12986:tid 140248751810304] [client 13.66.139.57:4800 ... show more[Thu Apr 08 22:00:38.457656 2021] [:error] [pid 12986:tid 140248751810304] [client 13.66.139.57:48000] [client 13.66.139.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-musim/295-prakiraan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau/prakiraan-sifat-hujan-musim-kemarau-di-propinsi-jawa-timur"] [unique_id "YG8aljL-Y6oqQJTYmC64yQAAagE"] ... show less	Hacking Web App Attack
Unwasted	06 Apr 2021	Blocked IP still knocking	Hacking