JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.68.130.242

13.68.130.242

Neutral Activity

40 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇺🇸 United States of America

City

Dulles Town Center, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.68.130.242 has been reported 40 times. The most recent report is from 5 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 13.68.130.242:

This IP address has been reported a total of 40 times from 28 distinct sources. 13.68.130.242 was first reported on February 23rd 2021, and the most recent report was 5 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 geot	2021-02-27 10:44:13 (5 years ago)	POST / HTTP/1.1 GET /.env HTTP/1.1	Hacking Web App Attack
🇺🇸 MortimerCat	2021-02-26 14:21:50 (5 years ago)	Attempting to download environment file	Web App Attack
🇩🇪 billaids	2021-02-26 11:37:29 (5 years ago)	13.68.130.242 - - [26/Feb/2021:17:37:22 +0100] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; L ... show more 13.68.130.242 - - [26/Feb/2021:17:37:22 +0100] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 13.68.130.242 - - [26/Feb/2021:17:37:23 +0100] "POST / HTTP/1.1" 405 568 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Bad Web Bot Exploited Host Web App Attack
🇫🇷 geot	2021-02-26 08:57:25 (5 years ago)	GET /.env HTTP/1.1 POST / HTTP/1.1	Hacking Web App Attack
🇫🇷 security.rdmc.fr	2021-02-26 07:23:20 (5 years ago)	Automatic report - Banned IP Access	Web App Attack
🇭🇺 whitehoodie	2021-02-26 06:22:02 (5 years ago)	AUTOMATED REPORT: Tried to access .env file	Hacking Bad Web Bot Web App Attack
🇨🇦 Mr Mista	2021-02-26 06:08:56 (5 years ago)	Exploit Scanning - Ambiguous Fingerprinting - Malformed Requests - Skiddie - Dodgy Requests: 13.68.1 ... show more Exploit Scanning - Ambiguous Fingerprinting - Malformed Requests - Skiddie - Dodgy Requests: 13.68.130.242 - - [26/Feb/2021:06:08:56 -0500] "GET /.env HTTP/1.1" ERR0R 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇩🇪 iNetWorker	2021-02-26 03:22:16 (5 years ago)	trolling for resource vulnerabilities	Web App Attack
Anonymous	2021-02-26 02:09:32 (5 years ago)	[Thu Feb 25 18:00:28.756140 2021] [:error] [pid 10696] [client 13.68.130.242] ModSecurity: Access de ... show more [Thu Feb 25 18:00:28.756140 2021] [:error] [pid 10696] [client 13.68.130.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "[mungedIP2]"] [uri "/.env"] [unique_id "YDgsDH8AAAEAACnIox4AAAAQ"] [Fri Feb 26 02:09:31.848115 2021] [:error] [pid 10260] [client 13.68.130.242] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generi show less	Bad Web Bot Web App Attack
🇩🇪 seller_service	2021-02-26 01:29:01 (5 years ago)	abuseConfidenceScore blocked for 12h	Web App Attack
Anonymous	2021-02-25 23:44:48 (5 years ago)	Invalid POST request	Hacking
🇦🇺 Ross Wheatley	2021-02-25 22:19:20 (5 years ago)	GET /.env HTTP/1.1 404 492 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) ... show more GET /.env HTTP/1.1 404 492 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Brute-Force Web App Attack
🇩🇪 Linux-Tech	2021-02-25 19:52:17 (5 years ago)	13.68.130.242 - - [25/Feb/2021:03:36:42 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; L ... show more 13.68.130.242 - - [25/Feb/2021:03:36:42 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 13.68.130.242 - - [26/Feb/2021:01:52:02 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 jcbriar	2021-02-25 18:56:51 (5 years ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇺🇸 KitsuneTech	2021-02-25 18:44:49 (5 years ago)	13.68.130.242 - - [25/Feb/2021:17:44:49 -0600] "GET /.env HTTP/1.1" 301 231 "-" "Mozilla/5.0 (X11; L ... show more 13.68.130.242 - - [25/Feb/2021:17:44:49 -0600] "GET /.env HTTP/1.1" 301 231 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

240.4.78.173

🇧🇷 205.210.31.233

🇮🇩 202.72.206.190

🇷🇺 194.154.92.163

🇬🇧 193.163.125.4

🇭🇳 168.181.122.221

🇳🇴 85.88.67.9

🇧🇬 79.124.62.242

🇧🇬 79.124.56.202

🇳🇱 45.148.10.152

🇮🇹 31.189.76.227

🇺🇸 20.106.206.151

🇺🇸 18.216.114.83

🇬🇧 2a04:4a43:49df:cdb5::278:58b3

🇦🇷 186.148.122.93

🇱🇹 185.2.228.48

🇩🇿 154.242.222.223

🇦🇴 154.71.174.124

🇭🇰 121.202.198.98

🇫🇷 91.196.152.236