AbuseIPDB » 13.79.148.213

13.79.148.213 was found in our database!

This IP was reported 197 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	Ireland
City	Dublin, Leinster

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 13.79.148.213

Whois 13.79.148.213

IP Abuse Reports for 13.79.148.213:

This IP address has been reported a total of 197 times from 111 distinct sources. 13.79.148.213 was first reported on June 23rd 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
SpaceHost-Server	2025-06-28 22:25:43 (2 weeks ago)		Brute-Force Web App Attack
rtbh.com.tr	2025-06-28 20:07:24 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
geot	2025-06-28 14:42:29 (2 weeks ago)	68 requests, including : GET /chosen.php? HTTP/1.1 GET /default.php HTTP/1.1 GET ... show more68 requests, including : GET /chosen.php? HTTP/1.1 GET /default.php HTTP/1.1 GET /wp-admin/css/colors/blue/index.php HTTP/1.1 GET /wp-content/plugins/index.php?p= HTTP/1.1 GET /wp-includes/widgets/hehe.php HTTP/1.1 GET /wp-admin/index.php HTTP/1.1 GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1 GET /themes/twentytwentytwo/index.php HTTP/1.1 GET /moon.php?p= HTTP/1.1 GET /wp-includes/style-engine/about.php HTTP/1.1 GET /autoload_classmap.php?p= HTTP/1.1 GET /wp-admin/includes/wp-login.php HTTP/1.1 GET /dropdown.php?p= HTTP/1.1 show less	Web App Attack
antlac1	2025-06-28 03:50:55 (2 weeks ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
charmicat	2025-06-28 03:09:24 (2 weeks ago)	AUTOMATED REPORT - suspicious request from 13.79.148.213: [Sat, 28 Jun 2025 03:09:24 +0000] GET /wp- ... show moreAUTOMATED REPORT - suspicious request from 13.79.148.213: [Sat, 28 Jun 2025 03:09:24 +0000] GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1 Unknown User Agent show less	Web App Attack
Anonymous	2025-06-28 02:53:28 (2 weeks ago)	ZUOBDE WEBEXPLOIT 13.79.148.213 (13.79.148.213)	Web App Attack
oh.mg	2025-06-28 02:47:45 (2 weeks ago)	[Sat Jun 28 04:47:41.803342 2025] [security2:error] [pid 824955:tid 824975] [client 13.79.148.213:83 ... show more[Sat Jun 28 04:47:41.803342 2025] [security2:error] [pid 824955:tid 824975] [client 13.79.148.213:8309] [client 13.79.148.213] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:blocking_outbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "243"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "nei.lol"] [uri "/wp-includes/pomo/ftp_nb_fget.php"] [unique_id "aF9XzR08olaACm5K4sffUQAAAQs"] [Sat Jun 28 04:47:44.802707 2025] [security2:error] [pid 818178:tid 818186] [client 13.79.148.213:5037] [client 13.79.148.213] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/ ... show less	Bad Web Bot Web App Attack
COMAITE	2025-06-28 02:07:06 (2 weeks ago)	Multiple web server 400 error codes from same source ip 13.79.148.213.	Web App Attack
Site.eu	2025-06-28 01:56:23 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
updown.io	2025-06-28 01:20:52 (2 weeks ago)	{"level":"info","ts":1751073648.6567996,"logger":"http.log.access.log1","msg":"handled request","req ... show more{"level":"info","ts":1751073648.6567996,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"13.79.148.213","remote_port":"8007","client_ip":"13.79.148.213","proto":"HTTP/1.1","method":"GET","host":"status.utreon.com","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000049784,"size":0,"status":308,"resp_headers":{"Location":["https://status.utreon.com/wp-content/plugins/hellopress/wp_filemanager.php"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}} {"level":"info","ts":1751073648.9569414,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"13.79.148.213","remote_port":"3654","client_ip":"13.79.148.213","proto":"HTTP/1.1","method":"GET","host":"status.utreon.com","uri":"/modules/mod_simplefileuploadv1.3/elements/filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000075453,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connect ... show less	DDoS Attack Web App Attack
archiv-pm	2025-06-28 01:12:21 (2 weeks ago)	Unauthorized connections HTTP 403	Web App Attack
ipblock.com	2025-06-28 00:35:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
rtbh.com.tr	2025-06-27 20:07:23 (2 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
dynamix	2025-06-27 17:08:10 (2 weeks ago)	Multiple WAF Violations	Web App Attack
S.O.B.A. Dev.	2025-06-27 15:23:42 (2 weeks ago)	Threat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Met ... show moreThreat Blocked by BeeHive from (ASN:8075) (Network:MICROSOFT-CORP-MSN-AS-BLOCK) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-06-27T15:23:42Z) show less	Web Spam Brute-Force Web App Attack