JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.70.31.127

13.70.31.127 was found in our database!

This IP was reported 157 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.70.31.127

Whois 13.70.31.127

IP Abuse Reports for 13.70.31.127:

This IP address has been reported a total of 157 times from 146 distinct sources. 13.70.31.127 was first reported on June 24th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 SkyDancer	2026-06-28 06:08:20 (5 hours ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
🇪🇸 Gem	2026-06-26 22:14:47 (1 day ago)	Unauthorized web scan.	Web App Attack
🇸🇮 administrator	2026-06-26 22:09:21 (1 day ago)	2026-06-24 17:17:59,323 fail2ban.actions [1067]: NOTICE [error-bots] Ban 13.70.31.127 2026-0 ... show more 2026-06-24 17:17:59,323 fail2ban.actions [1067]: NOTICE [error-bots] Ban 13.70.31.127 2026-06-24 17:17:59,323 fail2ban.actions [1067]: NOTICE [error-bots] Ban 13.70.31.127 2026-06-24 17:17:59,323 fail2ban.actions [1067]: NOTICE [error-bots] Ban 13.70.31.127 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-25 21:20:52 (2 days ago)	Too many Status 40X (44)	Brute-Force Web App Attack
Anonymous	2026-06-25 15:04:19 (2 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇫🇷 IRISIO	2026-06-25 10:29:34 (3 days ago)	scans/SQL injection/spam posts : 88 queries	Web App Attack SQL Injection
🇬🇧 openstrike.co.uk	2026-06-25 05:14:25 (3 days ago)	28 attacks on PHP URLs: GET /simple.php HTTP/1.1	Web App Attack
Anonymous	2026-06-25 05:04:55 (3 days ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇩🇪 MarkGGN	2026-06-24 23:36:50 (3 days ago)	Web attack. 13.70.31.127 - - [25/Jun/2026:01:36:48 +0200] "GET /ws.php HTTP/1.1" 404 27 "-" "-" 13.7 ... show more Web attack. 13.70.31.127 - - [25/Jun/2026:01:36:48 +0200] "GET /ws.php HTTP/1.1" 404 27 "-" "-" 13.70.31.127 - - [25/Jun/2026:01:36:49 +0200] "GET /wp-blog.php HTTP/1.1" 404 27 "-" "-" show less	Web App Attack
🇦🇺 2000cn.com.au	2026-06-24 23:36:33 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇦🇺 artful	2026-06-24 23:32:00 (3 days ago)	Excessive errors ~1k in recent hours	Web App Attack
🇫🇷 phoenix1jl96	2026-06-24 23:25:28 (3 days ago)	[Thu Jun 25 01:25:24.932029 2026] [proxy_fcgi:error] [pid 2589184:tid 2589184] [client 13.70.31.127: ... show more [Thu Jun 25 01:25:24.932029 2026] [proxy_fcgi:error] [pid 2589184:tid 2589184] [client 13.70.31.127:59332] AH01071: Got error 'Primary script unknown' [Thu Jun 25 01:25:25.146930 2026] [proxy_fcgi:error] [pid 2589184:tid 2589184] [client 13.70.31.127:59332] AH01071: Got error 'Primary script unknown' [Thu Jun 25 01:25:25.555453 2026] [proxy_fcgi:error] [pid 2589184:tid 2589184] [client 13.70.31.127:59332] AH01071: Got error 'Primary script unknown' [Thu Jun 25 01:25:25.752562 2026] [proxy_fcgi:error] [pid 2589184:tid 2589184] [client 13.70.31.127:59332] AH01071: Got error 'Primary script unknown' [Thu Jun 25 01:25:25.949707 2026] [proxy_fcgi:error] [pid 2589184:tid 2589184] [client 13.70.31.127:59332] AH01071: Got error 'Primary script unknown' ... show less	DNS Compromise DNS Poisoning DDoS Attack Web Spam Port Scan Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇫🇮 Kimmo Rieskaniemi	2026-06-24 23:08:44 (3 days ago)	CrowdSec triggered crowdsecurity/http-probing	Web App Attack Hacking
🇨🇭 beatsnet.com	2026-06-24 23:07:58 (3 days ago)	[Thu Jun 25 01:07:51.898091 2026] [proxy_fcgi:error] [pid 95291:tid 20404475887632] [client 13.70.31 ... show more [Thu Jun 25 01:07:51.898091 2026] [proxy_fcgi:error] [pid 95291:tid 20404475887632] [client 13.70.31.127:19856] AH01071: Got error 'Primary script unknown' [Thu Jun 25 01:07:52.192025 2026] [proxy_fcgi:error] [pid 95291:tid 20404475887632] [client 13.70.31.127:19856] AH01071: Got error 'Primary script unknown' [Thu Jun 25 01:07:52.559537 2026] [proxy_fcgi:error] [pid 95291:tid 20404475887632] [client 13.70.31.127:19856] AH01071: Got error 'Primary script unknown' [Thu Jun 25 01:07:52.743327 2026] [proxy_fcgi:error] [pid 95291:tid 20404475887632] [client 13.70.31.127:19856] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇺🇸 doll.gl	2026-06-24 22:53:35 (3 days ago)	13.70.31.127 - - [24/Jun/2026:22:53:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 13.70.31.127 - - [24/Jun/2026:22:53:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 280 "-" "-" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 157 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.97.1.246

🇬🇧 193.176.29.2

🇳🇱 176.65.149.178

🇸🇮 176.65.134.3

🇰🇷 150.109.241.177

🇻🇳 103.172.236.241

🇧🇩 103.153.110.190

🇨🇦 67.71.55.209

🇺🇸 44.54.169.151

🇬🇧 35.203.210.228

🇨🇳 180.76.105.165

🇺🇸 66.132.172.98

🇸🇬 47.84.134.237

🇩🇪 46.224.207.253

🇺🇸 44.128.205.244

🇺🇸 40.77.179.214

🇮🇩 34.34.223.108

🇺🇸 20.169.107.26

🇺🇸 147.185.132.157

🇺🇸 135.237.125.174