JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

13.78.235.154

Neutral Activity

Abuse Confidence Score

0% Low Risk

2 reports

2 reporters · latest 4 years ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Cheyenne, Wyoming

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.78.235.154 has been reported 2 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

2 from 2 distinct reporters

First reported

July 26th 2022

Most recent report

4 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2022-07-26 14:50:08 UTC · (4 years ago)	Restricted File Access Requests	Hacking Brute-Force
🇫🇷 Computech	2022-07-26 14:28:24 UTC · (4 years ago)	[Tue Jul 26 20:29:12.473311 2022] [:error] [pid 2635551:tid 140368230205184] [client 13.78.235.154:42508] [client 13.78.235.154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/ru ... show more [Tue Jul 26 20:29:12.473311 2022] [:error] [pid 2635551:tid 140368230205184] [client 13.78.235.154:42508] [client 13.78.235.154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "149.202.154.76"] [uri "/.env"] [unique_id "YuAyeHuTM26jBXxgbH6odwAACK0"] [Tue Jul 26 20:29:13.648936 2022] [:error] [pid 2639039:tid 140371266889472] [client 13.78.235.154:42706] [client 13.78.235.154] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ve ... show less	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 211.161.236.146

🇺🇸 172.234.218.34

🇺🇸 147.185.132.156

🇺🇸 147.185.132.15

🇹🇭 49.48.229.254

🇮🇪 34.255.200.215

🇬🇧 2602:f71d::20

🇺🇸 209.38.73.248

🇧🇪 198.235.24.227

🇺🇸 184.105.247.244

🇺🇸 147.185.132.138

🇺🇸 147.185.132.13

🇺🇸 138.197.198.177

🇺🇸 64.62.197.63

🇺🇸 51.8.102.178

🇬🇧 35.203.211.17

🇰🇷 34.64.235.193

🇺🇸 20.40.233.159

🇰🇷 14.53.202.223

🇰🇷 218.238.5.110