AbuseIPDB » 13.75.238.97

13.75.238.97 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 74%: ?

74%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Australia
City	Sydney, New South Wales

Report 13.75.238.97

Whois 13.75.238.97

IP Abuse Reports for 13.75.238.97:

This IP address has been reported a total of 65 times from 36 distinct sources. 13.75.238.97 was first reported on November 10th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-11-14 20:53:19 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
SkyDancer	2024-11-14 00:26:17 (4 weeks ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show moreMultiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
rtbh.com.tr	2024-11-13 20:53:19 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ecodehost.com	2024-11-13 11:51:09 (4 weeks ago)	Domain : ecodehost.com Rule : WEB IP in black list	Port Scan
PlexLads	2024-11-13 10:55:15 (4 weeks ago)	13.75.238.97 - - [13/Nov/2024:02:55:13 -0800] "HEAD /wordpress HTTP/1.1" 404 124 "-" "Mozilla/5.0 (W ... show more13.75.238.97 - - [13/Nov/2024:02:55:13 -0800] "HEAD /wordpress HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:02:55:14 -0800] "HEAD /wp HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:02:55:14 -0800] "HEAD /bc HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:02:55:14 -0800] "HEAD /bk HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:02:55:14 -0800] "HEAD /backup HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238 ... show less	Hacking Web App Attack
guillaume illien	2024-11-13 04:51:03 (4 weeks ago)	13.75.238.97 - - [13/Nov/2024:04:50:58 +0000] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Win ... show more13.75.238.97 - - [13/Nov/2024:04:50:58 +0000] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:04:50:59 +0000] "HEAD /wordpress HTTP/1.1" 301 0 "http://es-es.worders.net/wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:04:51:01 +0000] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:04:51:01 +0000] "HEAD / HTTP/1.1" 301 0 "http://es-es.worders.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:04:51:01 +0000] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Hacking Brute-Force Web App Attack SSH
juguemosalacarioca.com	2024-11-13 03:07:14 (4 weeks ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
dwmp	2024-11-13 02:43:34 (1 month ago)	Url probing: /wordpress	Web App Attack
Anonymous	2024-11-13 02:10:35 (1 month ago)	Probing to gain illegal access	Web App Attack
Anonymous	2024-11-13 02:08:39 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
guillaume illien	2024-11-13 01:56:29 (1 month ago)	13.75.238.97 - - [13/Nov/2024:01:56:24 +0000] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Win ... show more13.75.238.97 - - [13/Nov/2024:01:56:24 +0000] "HEAD /wordpress HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:01:56:25 +0000] "HEAD /wordpress HTTP/1.1" 301 0 "http://en-uk.worders.net/wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:01:56:27 +0000] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:01:56:27 +0000] "HEAD / HTTP/1.1" 301 0 "http://en-uk.worders.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 13.75.238.97 - - [13/Nov/2024:01:56:28 +0000] "HEAD /wp HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Hacking Brute-Force Web App Attack SSH
anon333	2024-11-12 23:33:19 (1 month ago)	Hacker syslog review 1731454399	Hacking
rtbh.com.tr	2024-11-12 20:53:20 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
el-brujo	2024-11-12 20:01:56 (1 month ago)	Cloudflare WAF: Request Path: /home Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windo ... show moreCloudflare WAF: Request Path: /home Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36 Action: block Source: ratelimit ASN Description: MICROSOFT-CORP-MSN-AS-BLOCK Country: AU Method: HEAD Timestamp: 2024-11-12T20:01:56Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
ToDi	2024-11-12 20:01:29 (1 month ago)	WebAttack or semilar from 13.75.238.97	Web App Attack