JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.70.0.59

13.70.0.59 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.70.0.59

Whois 13.70.0.59

IP Abuse Reports for 13.70.0.59:

This IP address has been reported a total of 53 times from 37 distinct sources. 13.70.0.59 was first reported on July 8th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-08 22:01:18 (3 days ago)	Auto-ban: >3000 req/min op 2026-07-08	Web App Attack SSH Hacking
🇳🇱 wlt-blocker	2026-07-08 18:33:03 (3 days ago)	Unauthorized access to webpage admin	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 18:32:10 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 13.70.0.59 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 13.70.0.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 14:32:05.723929 2026] [security2:error] [pid 26687:tid 26774] [client 13.70.0.59:3627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.bortec-corp.com"] [uri "/wp-config.php"] [unique_id "ak6Xpaid1a7e8Z_4Fa63JwAAAMU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-08 18:31:17 (3 days ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)	Hacking
🇩🇪 Blexyel	2026-07-08 18:23:34 (3 days ago)	13.70.0.59 - - [08/Jul/2026:20:23:33 +0200] "GET /wp-login.php HTTP/1.1" 404 146 "-" "-" ...	Brute-Force Web App Attack
🇨🇦 TechnoSolutions CL	2026-07-08 18:21:04 (3 days ago)	13.70.0.59 - - [08/Jul/2026:18:20:42 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php H ... show more 13.70.0.59 - - [08/Jul/2026:18:20:42 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 405 150 "-" "-" 13.70.0.59 - - [08/Jul/2026:18:21:03 +0000] "GET /wp-content/uploads/index.php HTTP/1.1" 405 150 "-" "-" ... show less	Hacking Brute-Force Web App Attack
Anonymous	2026-07-08 18:17:04 (3 days ago)	Bot / scanning and/or hacking attempts: GET /cord.php HTTP/1.1, GET /dex.php HTTP/1.1, GET /shelp.ph ... show more Bot / scanning and/or hacking attempts: GET /cord.php HTTP/1.1, GET /dex.php HTTP/1.1, GET /shelp.php HTTP/1.1, GET /wp-admin/admin-ajax.php HTTP/1.1, GET /wp-signup.php HTTP/1.1, GET /zwso.php HTTP/1.1, GET /xmlrpc_old.php HTTP/1.1, GET /xxmlrpc.php HTTP/1.1, GET /wp-conffg.php HTTP/1.1, GET /blurbs.php HTTP/1.1, GET /wp-start.php HTTP/1.1, GET / HTTP/1.1, GET /wp-settings.php HTTP/1.1, GET /wp-login.php?action=register HTTP/1.1, GET /wp-config.php HTTP/1.1, GET /settings.php HTTP/1.1, GET /wp-login.php?registration=disabled HTTP/1.1, GET /main.php HTTP/1.1, GET /wp-login.php HTTP/1.1, GET /init.php HTTP/1.1, GET /wp-cron.php HTTP/1.1, GET /login.php HTTP/1.1, GET /config-backup.php HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 18:11:57 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 13.70.0.59 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 13.70.0.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 14:11:53.838626 2026] [security2:error] [pid 5501:tid 5501] [client 13.70.0.59:1581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.321q.com"] [uri "/wp-config.php"] [unique_id "ak6S6XGbcW9I_UUKnyr-egAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-08 18:05:52 (3 days ago)	Too many Status 40X (20)	Brute-Force Web App Attack
🇫🇷 mrcrassi	2026-07-08 17:56:49 (3 days ago)	Triggered Cloudflare WAF (firewallManaged) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 tmiland	2026-07-08 17:51:41 (3 days ago)	(wordpress_login) WordPress Login Attack 13.70.0.59 (HK/Hong Kong/-): 3 in the last 3600 secs; IP: 1 ... show more (wordpress_login) WordPress Login Attack 13.70.0.59 (HK/Hong Kong/-): 3 in the last 3600 secs; IP: 13.70.0.59; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 13.70.0.59 - - [08/Jul/2026:19:51:24 +0200] "GET /wp-login.php HTTP/1.1" 302 138 "-" "-" 13.70.0.59 - - [08/Jul/2026:19:51:24 +0200] "GET /wp-login.php HTTP/1.1" 200 5712 "-" "-" 13.70.0.59 - - [08/Jul/2026:19:51:38 +0200] "GET /wp-login.php?action=register HTTP/1.1" 302 5 "-" "-" show less	Brute-Force
🇩🇪 maxpower	2026-07-08 17:46:29 (3 days ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 13.70.0.59 (HK/Hong Kong/-): 1 in the last 36 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 13.70.0.59 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 13.70.0.59 - - [08/Jul/2026:19:46:27 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 328 "-" "-" "-" host=mail.matteodinicola.net show less	Port Scan
🇳🇱 i-turnradio.nl	2026-07-08 17:35:06 (3 days ago)	2026-07-08 @ 19:35:06 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-07-08 @ 19:35:06 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇫🇷 Octopuce	2026-07-08 17:30:32 (3 days ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/hellopress/wp_filemanager.php /this_i ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/hellopress/wp_filemanager.php /this_is_a_new_hello_world.php /wk/ /function/func ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 17:30:31 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 13.70.0.59 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 13.70.0.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 13:30:26.353996 2026] [security2:error] [pid 6562:tid 6566] [client 13.70.0.59:11678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totalbodycare753.kylight.com"] [uri "/wp-config.php"] [unique_id "ak6JMr-jnzc3S2I3oudSrAAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 162.158.123.161

🇺🇸 66.132.172.153

🇺🇸 216.24.210.30

🇺🇸 173.31.53.107

🇸🇬 172.69.176.126

🇧🇷 138.99.81.4

🇻🇳 103.161.16.196

🇺🇸 64.62.156.39

🇩🇪 43.228.157.121

🇺🇸 37.221.111.109

🇳🇱 185.242.226.19

🇵🇱 176.53.159.198

🇸🇪 157.52.122.46

🇵🇾 143.202.209.172

🇨🇦 107.171.170.66

🇮🇳 106.51.108.97

🇩🇪 104.167.24.112

🇺🇸 103.143.231.24

🇧🇩 103.126.213.232

🇻🇳 103.82.194.100