JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.66.174.85

13.66.174.85 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Moses Lake, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.66.174.85

Whois 13.66.174.85

IP Abuse Reports for 13.66.174.85:

This IP address has been reported a total of 63 times from 52 distinct sources. 13.66.174.85 was first reported on March 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Execoop	2026-04-08 17:14:17 (1 month ago)	SSH honeypot \| Reconnaissance \| 1 auths, 38 cmds, 1.4m \| go_scanner	Hacking SSH
🇨🇳 さいとうあすか	2026-04-08 17:13:05 (1 month ago)	2026-04-09T01:13:01.922776+08:00 pbs sshd[3805587]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-04-09T01:13:01.922776+08:00 pbs sshd[3805587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.66.174.85 user=root 2026-04-09T01:13:03.400850+08:00 pbs sshd[3805587]: Failed password for root from 13.66.174.85 port 22568 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-04-08 17:12:00 (1 month ago)	2026-04-08T19:08:11.658874 mail2.akcurate.de sshd[559856]: Connection closed by authenticating user ... show more 2026-04-08T19:08:11.658874 mail2.akcurate.de sshd[559856]: Connection closed by authenticating user root 13.66.174.85 port 22568 [preauth] 2026-04-08T19:09:05.607921 mail2.akcurate.de sshd[559858]: Connection closed by authenticating user root 13.66.174.85 port 22568 [preauth] 2026-04-08T19:11:58.335195 mail2.akcurate.de sshd[559894]: Connection closed by authenticating user root 13.66.174.85 port 22568 [preauth] ... show less	Brute-Force SSH
🇳🇱 GabrielJST	2026-04-08 17:10:31 (1 month ago)	(sshd) Failed SSH login from 13.66.174.85 (US/United States/-)	Brute-Force SSH
🇯🇵 jay hung	2026-04-08 17:09:21 (1 month ago)	...	Brute-Force SSH
🇳🇱 big-cloud.nl	2026-04-08 17:09:06 (1 month ago)	Unauthorized SSH connection attempt	SSH
🇬🇧 aug42	2026-04-08 17:08:13 (1 month ago)	2026-04-08T20:08:11.122626+03:00 nexus6 sshd[702709]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-04-08T20:08:11.122626+03:00 nexus6 sshd[702709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.66.174.85 user=root 2026-04-08T20:08:13.454789+03:00 nexus6 sshd[702709]: Failed password for root from 13.66.174.85 port 22568 ssh2 ... show less	Brute-Force SSH
🇦🇷 Bruno	2026-04-08 14:49:58 (1 month ago)	Port Scanner: 13.66.174.85	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-04-08 14:49:15 (1 month ago)	[HP01-SRV01-FR] Blocked by SysWarden Firewall (SSH Attack Port 22)	Brute-Force SSH Port Scan
🇳🇱 homeshowdomain.nl	2026-04-07 21:59:12 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-06. show less	Web App Attack SSH Hacking
🇩🇪 4server	2026-04-06 07:00:20 (1 month ago)	[MonApr0609:00:14.0533412026][security2:error][pid3722537:tid3722541][client13.66.174.85:0]ModSecuri ... show more [MonApr0609:00:14.0533412026][security2:error][pid3722537:tid3722541][client13.66.174.85:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"/etc/passwd\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"141\"][id\"347009\"][rev\"1\"][msg\"Atomicorp.comWAFRules:ProtectedFileaccessdenied\"][severity\"CRITICAL\"][hostname\"prstartup.ch.136-243-54-122.cpanel.site\"][uri\"/@fs/etc/passwd\"][unique_id\"adNZ_sPEHtsJ28ESzuNVPwAAAIE\"]\,referer:https://outlook.live.com/ show less	Port Scan Brute-Force Web App Attack
🇧🇪 cmbplf	2026-04-06 06:29:19 (1 month ago)	340 requests with url.path */.git/config	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-06 04:48:23 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 13.66.174.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 13.66.174.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 00:48:17.512062 2026] [security2:error] [pid 18949:tid 18949] [client 13.66.174.85:42856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lizlemos.org.rejuvenationsystems.com"] [uri "/.git/config"] [unique_id "adM7ERJEm3Tu6HEpmajpcAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-06 04:09:25 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 13.66.174.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 13.66.174.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 00:09:20.640341 2026] [security2:error] [pid 31537:tid 31537] [client 13.66.174.85:42965] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkmysteries.biz"] [uri "/.git/config"] [unique_id "adMx8FfOIsh0Yc3dayfXhwAAAAE"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2026-04-06 02:35:41 (1 month ago)	Brute Force Attack on a Web Resources (probe) #1	DDoS Attack Web Spam Brute-Force Web App Attack

Showing 46 to 60 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.197.78.22

🇺🇸 193.56.20.79

🇳🇱 192.253.248.169

🇮🇳 103.211.16.246

🇨🇳 58.19.80.81

🇳🇱 45.92.1.244

🇺🇸 34.207.238.98

🇳🇱 172.233.41.45

🇩🇪 172.71.144.140

🇻🇳 171.231.180.45

🇵🇭 160.250.44.54

🇨🇳 106.13.46.139

🇺🇸 91.230.168.245

🇷🇴 80.94.92.165

🇳🇱 78.142.18.172

🇺🇸 64.62.197.131

🇸🇪 9.223.176.221

🇺🇸 216.128.153.42

🇫🇷 212.107.0.98

🇺🇸 162.216.150.120