JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.67.63.90

13.67.63.90 was found in our database!

This IP was reported 312 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.67.63.90

Whois 13.67.63.90

IP Abuse Reports for 13.67.63.90:

This IP address has been reported a total of 312 times from 49 distinct sources. 13.67.63.90 was first reported on July 17th 2023, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-02-20 11:52:34 (5 months ago)	Blocked by UFW (TCP on 50928) Source port: 443 TTL: 114 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 50928) Source port: 443 TTL: 114 Packet length: 40 TOS: 0x00 This report (for 13.67.63.90) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇰 wnbhosting.dk	2024-11-18 11:12:32 (1 year ago)	WP xmlrpc [2024-11-18T12:12:32+01:00]	Hacking Web App Attack
🇩🇰 wnbhosting.dk	2024-11-13 15:54:09 (1 year ago)	WP xmlrpc [2024-11-13T16:54:09+01:00]	Hacking Web App Attack
Anonymous	2024-11-13 06:15:56 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-11-06 05:59:57 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 00:59:54.197281 2024] [security2:error] [pid 1615357:tid 1615357] [client 13.67.63.90:6209] [client 13.67.63.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|systemcapacityoptimization.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "systemcapacityoptimization.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZysF2S4Z2a7-S9-_HDzT4AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-05 18:26:15 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 13:26:09.996181 2024] [security2:error] [pid 2332:tid 2332] [client 13.67.63.90:6209] [client 13.67.63.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|greatwesternfirearms.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greatwesternfirearms.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZypjQW3uHhLmyicxjn-mAwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-05 17:48:27 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 12:48:19.549095 2024] [security2:error] [pid 19010:tid 19010] [client 13.67.63.90:6209] [client 13.67.63.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hotpay.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotpay.co"] [uri "/wp-json/wp/v2/users"] [unique_id "ZypaYxwK6TOeH71gfQf6cQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-05 17:12:31 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 12:12:25.960340 2024] [security2:error] [pid 231491:tid 231491] [client 13.67.63.90:6209] [client 13.67.63.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kotelbarmitzvah.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kotelbarmitzvah.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZypR-ZyuCNWLYbAGKytesAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇰 wnbhosting.dk	2024-10-30 09:29:54 (1 year ago)	WP xmlrpc [2024-10-30T10:29:54+01:00]	Hacking Web App Attack
🇩🇰 wnbhosting.dk	2024-10-29 10:07:39 (1 year ago)	WP xmlrpc [2024-10-29T11:07:39+01:00]	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-10-29 02:54:26 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 13.67.63.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 28 22:54:23.227441 2024] [security2:error] [pid 19381:tid 19381] [client 13.67.63.90:6209] [client 13.67.63.90] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|gabbyspetnanny.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gabbyspetnanny.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZyBOXvovPtMbAPPjhuYsxgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇰 wnbhosting.dk	2024-10-27 18:21:08 (1 year ago)	WP xmlrpc [2024-10-27T19:21:08+01:00]	Hacking Web App Attack
🇩🇰 wnbhosting.dk	2024-10-27 08:52:55 (1 year ago)	WP xmlrpc [2024-10-27T09:52:55+01:00]	Hacking Web App Attack
🇬🇧 thetomtaylor.co.uk	2024-10-26 02:33:08 (1 year ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [wa02]	Bad Web Bot Web App Attack
🇩🇰 wnbhosting.dk	2024-10-25 06:03:53 (1 year ago)	WP xmlrpc [2024-10-25T08:03:53+02:00]	Hacking Web App Attack

Showing 1 to 15 of 312 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2804:e94:10d2:3200:156d:184e:82b:422b

🇰🇪 217.199.144.53

🇬🇧 193.163.125.248

🇺🇸 185.191.171.4

🇨🇦 142.44.233.83

🇰🇷 121.162.61.229

🇰🇷 59.22.201.143

🇨🇳 14.103.115.124

🇦🇪 5.31.202.115

🇦🇷 179.62.87.195

🇺🇸 152.32.205.153

🇩🇪 94.26.106.70

🇺🇸 43.135.135.17

🇬🇧 35.203.210.101

🇺🇸 195.184.76.53

🇺🇸 195.184.76.50

🇷🇴 193.32.162.42

🇳🇱 192.42.116.101

🇳🇱 185.93.89.130

🇮🇩 175.158.43.36