JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.70.2.225

13.70.2.225 was found in our database!

This IP was reported 118 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.70.2.225

Whois 13.70.2.225

IP Abuse Reports for 13.70.2.225:

This IP address has been reported a total of 118 times from 86 distinct sources. 13.70.2.225 was first reported on June 5th 2026, and the most recent report was 22 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 thaizone.com	2026-06-07 00:18:09 (22 minutes ago)	Hacking attempts against websites (D1) #2	Web App Attack Hacking
🇫🇷 LRob.fr	2026-06-07 00:15:02 (25 minutes ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇩🇪 4server	2026-06-07 00:10:14 (30 minutes ago)	[SunJun0702:10:09.8370372026][security2:error][pid3026553:tid3026679][client13.70.2.225:0]ModSecurit ... show more [SunJun0702:10:09.8370372026][security2:error][pid3026553:tid3026679][client13.70.2.225:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mail.feldenkraisticino.ch\"][uri\"/xmlrpc.php\"][unique_id\"aiS24eTvTcb8YBOq4m9pcAAAAQY\"] show less	Port Scan Brute-Force Web App Attack
🇮🇹 VHosting	2026-06-06 23:35:03 (1 hour ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 macrob	2026-06-06 23:33:28 (1 hour ago)	2026/06/06 23:33:19 [error] 1259141#1259141: 285838565 access forbidden by rule, client: 13.70.2.22 ... show more 2026/06/06 23:33:19 [error] 1259141#1259141: 285838565 access forbidden by rule, client: 13.70.2.225, server: binixo.co, request: "GET /admin.php HTTP/1.1", host: "binixo.co" 2026/06/06 23:33:25 [error] 1259141#1259141: 285838565 access forbidden by rule, client: 13.70.2.225, server: binixo.co, request: "GET /xmlrpc.php HTTP/1.1", host: "binixo.co" 2026/06/06 23:33:26 [error] 1259141#1259141: 285838565 access forbidden by rule, client: 13.70.2.225, server: binixo.co, request: "GET /wp-admin.php HTTP/1.1", host: "binixo.co" ... show less	Web App Attack
🇫🇷 ✨	2026-06-06 23:33:08 (1 hour ago)	Rule : Security IP in black list	Port Scan Hacking Brute-Force
🇪🇸 el-brujo	2026-06-06 23:20:12 (1 hour ago)	Cloudflare WAF: Request Path: /ALFA_DATA/alfacgiapi/ Request Query: Host: wiki.elhacker.net userAge ... show more Cloudflare WAF: Request Path: /ALFA_DATA/alfacgiapi/ Request Query: Host: wiki.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Action: log Source: firewallManaged ASN Description: Microsoft Corporation Country: HK Method: GET Timestamp: 2026-06-06T23:20:12Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 NetShield-DE	2026-06-06 23:07:12 (1 hour ago)	Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-07T ... show more Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb. Events: 1. First: 2026-06-07T01:07:01+0200. Last: 2026-06-07T01:07:01+0200. Samples: - 2026-06-07 00:31:08,139 fail2ban.actions [1405153]: NOTICE [abuseipdb] Ban 13.70.2.225 show less	Web App Attack
🇺🇸 TAY	2026-06-06 22:50:00 (1 hour ago)	13.70.2.225 - - [07/Jun/2026:06:43:54 +0800] "GET /updates.php HTTP/1.1" 404 2127 "-" "Mozilla/5.0 ( ... show more 13.70.2.225 - - [07/Jun/2026:06:43:54 +0800] "GET /updates.php HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.70.2.225 - - [07/Jun/2026:06:43:58 +0800] "GET /update.php HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 13.70.2.225 - - [07/Jun/2026:06:50:00 +0800] "GET /updates.php HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force
🇷🇺 sms.ru	2026-06-06 22:28:22 (2 hours ago)	/wp-admin/images/	Web App Attack
🇫🇷 SpaceHost-Server	2026-06-06 22:25:36 (2 hours ago)		Brute-Force Web App Attack
Anonymous	2026-06-06 22:16:57 (2 hours ago)	Automated report (2026-06-06T18:16:57-04:00). Caught probing for webshells/backdoors. Host might be ... show more Automated report (2026-06-06T18:16:57-04:00). Caught probing for webshells/backdoors. Host might be compromised. show less	Hacking Exploited Host Web App Attack Open Proxy
🇩🇪 ger-stg-sifi1	2026-06-06 21:57:21 (2 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 Site.eu	2026-06-06 20:58:35 (3 hours ago)	Excessive multi-domain requests	Brute-Force
🇨🇿 ptlab	2026-06-06 20:45:31 (3 hours ago)	Detected xmlrpc_brute attack from WP-host.	Hacking Web App Attack

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.13

🇺🇾 179.24.93.11

🇭🇰 152.32.239.122

🇭🇰 103.210.238.204

🇳🇱 81.19.216.74

🇷🇴 80.94.92.186

🇩🇪 194.36.88.178

🇨🇳 123.245.84.29

🇺🇸 66.132.195.17

🇨🇳 14.103.115.237

🇺🇸 205.210.31.73

🇺🇸 194.62.107.166

🇬🇧 193.163.125.12

🇷🇺 176.194.52.32

🇳🇱 176.65.139.151

🇫🇮 147.185.133.140

🇳🇱 143.14.124.123

🇨🇾 85.208.98.22

🇳🇱 45.148.10.121

🇺🇸 18.190.15.50