JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

13.75.48.13

Recent Activity

Abuse confidence score ?

100% Critical

79 reports

49 reporters · latest 2 hours ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 13.75.48.13

Export CSV

This IP address has been reported a total of 79 times from 49 distinct sources. 13.75.48.13 was first reported on October 2nd 2026, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: Germany with 21 reports; United States of America with 21 reports; United Kingdom of Great Britain and Northern Ireland with 7 reports. The most common categories in these recent reports were: Web App Attack 63 times; Bad Web Bot 29 times; Brute-Force 29 times; Hacking 15 times; Port Scan 11 times; Other 8 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ✨	2026-10-05 23:13:07 (2 hours ago)	Rule : Security IP in black list	Port Scan Hacking Brute-Force
🇺🇸 Epimetheus	2026-10-05 22:12:29 (3 hours ago)	Unauthorized access attempts: [GET] /xmlrpc.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7 ... show more Unauthorized access attempts: [GET] /xmlrpc.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15 show less	Web App Attack
🇦🇹 Pingger Shikkoken	2026-10-05 21:54:36 (3 hours ago)	2026-10-05T21:54:36+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-10-05T21:54:36+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=13.75.48.13 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=100 ID=26163 DF PROTO=TCP SPT=2781 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-05T21:54:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=13.75.48.13 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=100 ID=26164 DF PROTO=TCP SPT=2781 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-10-05T21:54:39+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=13.75.48.13 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=100 ID=26165 DF PROTO=TCP SPT=2781 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇺🇸 Epimetheus	2026-10-05 20:20:30 (5 hours ago)	Unauthorized access attempts: [GET] /xmlrpc.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) ... show more Unauthorized access attempts: [GET] /xmlrpc.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36 show less	Web App Attack
🇩🇪 4server	2026-10-05 16:50:50 (8 hours ago)	[MonOct0518:50:46.0018612026][security2:error][pid2561314:tid2561443][client13.75.48.13:0]ModSecurit ... show more [MonOct0518:50:46.0018612026][security2:error][pid2561314:tid2561443][client13.75.48.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mail.orabonastudio.it\"][uri\"/xmlrpc.php\"][unique_id\"asPVZt1pKFpQGwsn4VOAbwAAAQ8\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-10-05 12:14:06 (13 hours ago)	[MonOct0514:14:00.7942152026][security2:error][pid787673:tid787681][client13.75.48.13:0]ModSecurity: ... show more [MonOct0514:14:00.7942152026][security2:error][pid787673:tid787681][client13.75.48.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"cpcalendars.mio-ip.ch\"][uri\"/xmlrpc.php\"][unique_id\"asOUiOuIGB8YaFfzYODaRwAAAMY\"]\,referer:https://wordpress.org/ show less	Hacking Web App Attack
🇨🇿 akac	2026-10-05 05:05:13 (20 hours ago)	Web vulnerability scanning: HTTP/1.1 GET /xmlrpc.php	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 eposs-it.de	2026-10-05 04:35:13 (21 hours ago)	Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=443	Port Scan Hacking
🇩🇪 Gwyneth Llewelyn	2026-10-05 03:06:54 (22 hours ago)	13.75.48.13 - - [05/Oct/2026:04:06:51 +0100] "GET /roundcube/xmlrpc.php HTTP/1.1" 404 150 "https://w ... show more 13.75.48.13 - - [05/Oct/2026:04:06:51 +0100] "GET /roundcube/xmlrpc.php HTTP/1.1" 404 150 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.85 Safari/537.36" show less	Bad Web Bot
🇧🇪 voormedia	2026-10-05 01:10:03 (1 day ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇺🇦 URAN Publishing Service	2026-10-04 23:48:40 (1 day ago)	[05/Oct/2026:02:48:39 +0300] -- 13.75.48.13 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /xmlrpc ... show more [05/Oct/2026:02:48:39 +0300] -- 13.75.48.13 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /xmlrpc.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-10-04 22:00:58 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 8075 (Microsoft Corporat ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /xmlrpc.php Timestamp: 2026-10-04T21:09:00Z Ray ID: a4572a47cd4b85ec UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15) Gecko/20100101 Firefox/121.0 show less	Bad Web Bot
🇩🇪 4server	2026-10-04 21:28:29 (1 day ago)	[SunOct0423:28:27.6527242026][security2:error][pid1409065:tid1409148][client13.75.48.13:0]ModSecurit ... show more [SunOct0423:28:27.6527242026][security2:error][pid1409065:tid1409148][client13.75.48.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"spicydesign.ch\"][uri\"/xmlrpc.php\"][unique_id\"asLE-_5DZxDkphi4kLprHQAAAJY\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Jochen Pretli	2026-10-04 21:04:02 (1 day ago)	connection to honeypot	Email Spam Port Scan
🇬🇧 ISPLtd	2026-10-04 18:59:14 (1 day ago)	13.75.48.13 - - [04/Oct/2026:15:59:11 -0300] "GET /xmlrpc.php 13.75.48.13 - - [04/Oct/2026:15:59:12 ... show more 13.75.48.13 - - [04/Oct/2026:15:59:11 -0300] "GET /xmlrpc.php 13.75.48.13 - - [04/Oct/2026:15:59:12 -0300] "GET /xmlrpc.php ... show less	Hacking Web App Attack

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 122.170.99.195

🇺🇸 34.73.224.4

🇨🇳 14.22.23.243

🇸🇬 2a12:f547:2db0:e240:4657:c9a0:86ba:70d

🇨🇳 223.241.214.127

🇰🇷 211.106.133.202

🇺🇸 195.184.76.117

🇬🇧 194.50.235.140

🇨🇱 191.114.192.175

🇷🇺 176.126.50.140

🇺🇸 172.56.69.182

🇧🇷 170.246.47.134

🇺🇸 167.234.121.86

🇹🇼 152.32.229.251

🇺🇸 136.118.29.23

🇺🇸 136.86.189.53

🇺🇸 136.65.240.65

🇰🇷 112.184.11.161

🇨🇳 112.6.11.184

🇹🇼 111.70.48.48