AbuseIPDB » 13.66.139.61

Check an IP Address, Domain Name, or Subnet

e.g. 18.234.247.75, microsoft.com, or 5.188.10.0/24

13.66.139.61 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 52%: ?

52%

ISP	Microsoft Corporation
Usage Type	Search Engine Spider
Hostname(s)	msnbot-13-66-139-61.search.msn.com
Domain Name	microsoft.com
Country	United States of America
City	Redmond, Washington

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 13.66.139.61

Whois 13.66.139.61

IP Abuse Reports for 13.66.139.61:

This IP address has been reported a total of 40 times from 10 distinct sources. 13.66.139.61 was first reported on November 18th 2020, and the most recent report was 37 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
iNetWorker	22 hours ago		Web App Attack
iNetWorker	14 Jan 2021		Web App Attack
hermawan	13 Jan 2021	[Wed Jan 13 18:38:54.414414 2021] [:error] [pid 4488:tid 140441690400512] [client 13.66.139.61:62592 ... show more[Wed Jan 13 18:38:54.414414 2021] [:error] [pid 4488:tid 140441690400512] [client 13.66.139.61:62592] [client 13.66.139.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/sitemap/85-berita"] [unique_id "X-7bztcYd8eWUn6HxvrQxAAAAbs"] ... show less	Hacking Web App Attack
seller_service	12 Jan 2021	abuseConfidenceScore blocked for 12h	Web App Attack
seller_service	10 Jan 2021	abuseConfidenceScore blocked for 12h	Web App Attack
seller_service	07 Jan 2021	abuseConfidenceScore blocked for 12h	Web App Attack
hermawan	04 Jan 2021	[Mon Jan 04 23:11:16.689015 2021] [:error] [pid 1653:tid 140334600738560] [client 13.66.139.61:14528 ... show more[Mon Jan 04 23:11:16.689015 2021] [:error] [pid 1653:tid 140334600738560] [client 13.66.139.61:14528] [client 13.66.139.61] ModSecurity: Access denied with code 403 (phase 3). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "119"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [tag "OWASP_CRS"] [tag "capec/1000/152"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/555557191-infografis-dasarian-di-provinsi-jawa-timur-update-28-februari-2019"] [unique_id "[email protected]"] ... show less	Hacking Web App Attack
hermawan	04 Jan 2021	[Mon Jan 04 16:06:12.042981 2021] [:error] [pid 7744:tid 139646273046272] [client 13.66.139.61:11651 ... show more[Mon Jan 04 16:06:12.042981 2021] [:error] [pid 7744:tid 139646273046272] [client 13.66.139.61:11651] [client 13.66.139.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "((?:[[email protected]#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>][^[email protected]#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>]*?){12})" at ARGS:id. [file "/etc/modsecurity/coreruleset-3.3.1-rc1/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "1200"] [id "942430"] [msg "Restricted SQL Character Anomaly Detection (args): # of special characters exceeded (12)"] [data "Matched Data: :prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal- found within ARGS:id: 860:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-19-25-januari-2016"] [severity "WARNING"] [ver "OWASP_CRS/3.3.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-m ... show less	Hacking Web App Attack
Anonymous	03 Jan 2021	sitemap.xml file request	Hacking Web App Attack
Harm222	03 Jan 2021	User(visforms) 48th: try to access forms...	Hacking
hermawan	01 Jan 2021	[Sat Jan 02 04:35:45.185627 2021] [:error] [pid 23912:tid 139796769265408] [client 13.66.139.61:1209 ... show more[Sat Jan 02 04:35:45.185627 2021] [:error] [pid 23912:tid 139796769265408] [client 13.66.139.61:12096] [client 13.66.139.61] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/coreruleset-3.3.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "119"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [tag "OWASP_CRS"] [tag "capec/1000/152"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/kalender-tanam-katam-terpadu-kecamatan-peureulak-barat-kabupaten-aceh-timur-musim-kemarau-tahun-2017"] [unique_id "[email protected]@[email protected]"] ... show less	Hacking Web App Attack
hermawan	31 Dec 2020	[Fri Jan 01 04:55:04.873099 2021] [:error] [pid 18674:tid 140629082359552] [client 13.66.139.61:1728 ... show more[Fri Jan 01 04:55:04.873099 2021] [:error] [pid 18674:tid 140629082359552] [client 13.66.139.61:1728] [client 13.66.139.61] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/coreruleset-3.3.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "119"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [tag "OWASP_CRS"] [tag "capec/1000/152"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/analisis-iklim/analisis-dasarian/distribusi-curah-hujan-dasarian-provinsi-jawa-timur/555557764-analisis-dasarian-distribusi-curah-hujan-dasarian-iii-desember-2019-di-provinsi-jawa-timur"] [unique_id "[email protected]"] ... show less	Hacking Web App Attack
Anonymous	31 Dec 2020	WEB_SERVER 403 Forbidden	Hacking
hermawan	29 Dec 2020	[Wed Dec 30 10:23:59.104112 2020] [:error] [pid 16662:tid 139918170818304] [client 13.66.139.61:1165 ... show more[Wed Dec 30 10:23:59.104112 2020] [:error] [pid 16662:tid 139918170818304] [client 13.66.139.61:11650] [client 13.66.139.61] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/coreruleset-3.3.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "119"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 503 found within RESPONSE_STATUS: 503"] [severity "ERROR"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [tag "OWASP_CRS"] [tag "capec/1000/152"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/cari"] [unique_id "[email protected]"] ... show less	Hacking Web App Attack
hermawan	29 Dec 2020	[Wed Dec 30 04:57:48.066924 2020] [:error] [pid 3792:tid 140706968667904] [client 13.66.139.61:1728] ... show more[Wed Dec 30 04:57:48.066924 2020] [:error] [pid 3792:tid 140706968667904] [client 13.66.139.61:1728] [client 13.66.139.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "((?:[[email protected]#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>][^[email protected]#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>]*?){12})" at ARGS:id. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "1200"] [id "942430"] [msg "Restricted SQL Character Anomaly Detection (args): # of special characters exceeded (12)"] [data "Matched Data: :prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal- found within ARGS:id: 684:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-1-7-september-2015"] [severity "WARNING"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi" ... show less	Hacking Web App Attack