JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.75.48.182

13.75.48.182 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.75.48.182

Whois 13.75.48.182

IP Abuse Reports for 13.75.48.182:

This IP address has been reported a total of 50 times from 33 distinct sources. 13.75.48.182 was first reported on July 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mw	2026-07-09 00:01:32 (1 day ago)	GET /wp-admin/a.php HTTP/1.1	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-08 22:00:55 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-08	Web App Attack SSH Hacking
🇦🇹 penguin-solutions.at	2026-07-08 17:40:31 (1 day ago)	Excessive 403/404 errors ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 17:28:55 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 13:28:48.507494 2026] [security2:error] [pid 8144:tid 8144] [client 13.75.48.182:10050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zmgmt.z-mgmt.com"] [uri "/wp-config.php"] [unique_id "ak6I0LSUZutIf4yutqrrrQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marco711	2026-07-08 17:11:01 (1 day ago)	port/URL scanning	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 17:06:17 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 13:06:11.451555 2026] [security2:error] [pid 11803:tid 11803] [client 13.75.48.182:8398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mumawvickers.com"] [uri "/wp-config.php"] [unique_id "ak6Dg64go0KiZN8ZFHP9cQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-08 16:55:25 (1 day ago)	Web vulnerability probing: /wk/index.php	Web App Attack
🇩🇪 stinpriza	2026-07-08 16:45:06 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 16:39:57 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 12:39:50.982649 2026] [security2:error] [pid 28986:tid 28986] [client 13.75.48.182:10358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fingercult.com"] [uri "/wp-config.php"] [unique_id "ak59ViGOifdhHM3gIHOk7gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 INTEQ	2026-07-08 16:31:23 (1 day ago)	Web attack from 13.75.48.182	Web App Attack
🇨🇦 TechnoSolutions CL	2026-07-08 16:26:40 (1 day ago)	13.75.48.182 - - [08/Jul/2026:16:06:36 +0000] "GET /wp-admin/alfa.php HTTP/1.1" 405 150 "-" "-" 13.7 ... show more 13.75.48.182 - - [08/Jul/2026:16:06:36 +0000] "GET /wp-admin/alfa.php HTTP/1.1" 405 150 "-" "-" 13.75.48.182 - - [08/Jul/2026:16:26:39 +0000] "GET /wp-content/txets.php HTTP/1.1" 405 150 "-" "-" 13.75.48.182 - - [08/Jul/2026:16:26:39 +0000] "GET /wp-content/txets.php HTTP/1.1" 405 150 "-" "-" 13.75.48.182 - - [08/Jul/2026:16:26:40 +0000] "GET /wp-admin/txets.php HTTP/1.1" 405 150 "-" "-" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 16:24:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 12:24:43.745218 2026] [security2:error] [pid 17521:tid 17547] [client 13.75.48.182:5382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.mandhco.com"] [uri "/wp-config.php"] [unique_id "ak55yy7qGT6wo-nGdk0w2AAAAE4"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 TechnoSolutions CL	2026-07-08 16:06:36 (1 day ago)	13.75.48.182 - - [08/Jul/2026:16:06:18 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 13.75.48.182 - - [08/Jul/2026:16:06:18 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 405 150 "-" "-" 13.75.48.182 - - [08/Jul/2026:16:06:22 +0000] "GET /wp-content/uploads/index.php HTTP/1.1" 405 150 "-" "-" 13.75.48.182 - - [08/Jul/2026:16:06:26 +0000] "GET /wp-login.php HTTP/1.1" 404 42628 "-" "-" 13.75.48.182 - - [08/Jul/2026:16:06:36 +0000] "GET /wp-admin/a.php HTTP/1.1" 405 150 "-" "-" ... show less	Hacking Brute-Force Web App Attack
Anonymous	2026-07-08 16:05:30 (1 day ago)	Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=10	Hacking
🇺🇸 TPI-Abuse	2026-07-08 15:59:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 13.75.48.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 11:59:50.828915 2026] [security2:error] [pid 1193:tid 1193] [client 13.75.48.182:3259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tireking.com"] [uri "/wp-config.php"] [unique_id "ak5z9h9_SljwGC1icnKOBwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 182.10.99.182

🇲🇾 113.211.213.104

🇺🇸 66.132.186.212

🇧🇷 45.205.1.240

🇬🇧 35.203.210.191

🇰🇷 211.221.196.103

🇰🇷 182.210.76.170

🇺🇸 157.131.203.254

🇨🇦 143.110.215.181

🇮🇩 103.172.186.150

🇮🇩 103.97.101.25

🇺🇸 64.62.156.24

🇬🇧 45.133.173.195

🇯🇵 43.165.170.19

🇻🇳 36.50.135.229

🇮🇩 27.124.95.134

🇨🇳 220.182.14.60

🇨🇳 171.88.145.213

🇩🇪 167.94.145.30

🇫🇮 147.185.133.218