JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.84.161.159

13.84.161.159 was found in our database!

This IP was reported 159 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	San Antonio, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.84.161.159

Whois 13.84.161.159

IP Abuse Reports for 13.84.161.159:

This IP address has been reported a total of 159 times from 56 distinct sources. 13.84.161.159 was first reported on July 26th 2021, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 advena	2022-08-19 11:30:22 (3 years ago)	13.84.161.159 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2022-08-19T15:25:53Z after vio ... show more 13.84.161.159 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2022-08-19T15:25:53Z after violating WAF directive: 100016 (Version Control - Information Disclosure). Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇳🇱 CryptoYakari	2022-08-19 09:41:27 (3 years ago)	13.84.161.159 - - [19/Aug/2022:16:41:12 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 62345 "-" "Mozl ... show more 13.84.161.159 - - [19/Aug/2022:16:41:12 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 62345 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [19/Aug/2022:16:41:15 +0300] "GET /phpinfo HTTP/1.0" 404 62275 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [19/Aug/2022:16:41:16 +0300] "GET /aws.yml HTTP/1.0" 404 62275 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [19/Aug/2022:16:41:19 +0300] "GET /info.php HTTP/1.0" 404 62281 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [19/Aug/202 ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇦🇺 nyclee.net	2022-08-19 08:23:25 (3 years ago)	WebApp Attack	Brute-Force Web App Attack
🇳🇱 CryptoYakari	2022-08-18 22:06:19 (3 years ago)	13.84.161.159 - - [19/Aug/2022:05:06:04 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 3589 "-" "Mozli ... show more 13.84.161.159 - - [19/Aug/2022:05:06:04 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 3589 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [19/Aug/2022:05:06:05 +0300] "GET /phpinfo.php HTTP/1.0" 404 201 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [19/Aug/2022:05:06:07 +0300] "GET /phpinfo HTTP/1.0" 404 3589 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [19/Aug/2022:05:06:08 +0300] "GET /aws.yml HTTP/1.0" 404 3589 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [19/Aug/2022: ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇹🇷 baku.hosting	2022-08-18 20:04:20 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 13.84.161.159 (US/United States/-): 8 in the la ... show more (mod_security) mod_security (id:949110) triggered by 13.84.161.159 (US/United States/-): 8 in the last 3600 secs show less	Brute-Force
🇳🇱 Savvii	2022-08-18 17:18:21 (3 years ago)	20 attempts against mh-misbehave-ban on oak	Brute-Force Bad Web Bot Web App Attack
🇦🇺 advena	2022-08-18 15:15:13 (3 years ago)	13.84.161.159 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2022-08-18T19:10:32Z after vio ... show more 13.84.161.159 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2022-08-18T19:10:32Z after violating WAF directive: 100016 (Version Control - Information Disclosure). Pre-cautionary/corrective action applied: block. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 advena	2022-08-18 09:00:28 (3 years ago)	13.84.161.159 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2022-08-18T12:55:47Z after vio ... show more 13.84.161.159 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2022-08-18T12:55:47Z after violating WAF directive: bot_fight_mode. Pre-cautionary/corrective action applied: jschallenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇦🇺 nyclee.net	2022-08-18 07:42:46 (3 years ago)	WebApp Attack	Brute-Force Web App Attack
🇸🇬 Sofibox Cyberwatch	2022-08-18 06:42:58 (3 years ago)	[bad_ip: 13.84.161.159 [alert_level: High Risk [inbound(4)+outbound(0): 4 [target_port: 80 [class: M ... show more [bad_ip: 13.84.161.159 [alert_level: High Risk [inbound(4)+outbound(0): 4 [target_port: 80 [class: Misc Attack [msg: ET INFO Request to Hidden Environment File [csf_block_status: ip-already-blocked [blcheck_ip_score: 98.45% (3/193) [blcheck_domain: "bl.fmb.la,dnsbl.sorbs.net,dnsbl.spfbl.net" [blcheck_comment: "blcheck IPv4+IPv6 scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 5.26% [mod_security_alert: false [has_cidr24_network: false(1) show less	Hacking
🇸🇬 Sofibox Cyberwatch	2022-08-18 04:37:08 (3 years ago)	[bad_ip: 13.84.161.159 [alert_level: High Risk [inbound(3)+outbound(0): 3 [target_port: 80 [class: I ... show more [bad_ip: 13.84.161.159 [alert_level: High Risk [inbound(3)+outbound(0): 3 [target_port: 80 [class: Information Leak [msg: ET WEB_SERVER WEB-PHP phpinfo access [csf_block_status: ip-already-blocked [blcheck_ip_score: 98.45% (3/193) [blcheck_domain: "bl.fmb.la,dnsbl.sorbs.net,dnsbl.spfbl.net" [blcheck_comment: "blcheck IPv4+IPv6 scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 5.26% [mod_security_alert: false [has_cidr24_network: false(1) show less	Port Scan
🇸🇬 Sofibox Cyberwatch	2022-08-18 03:40:41 (3 years ago)	[bad_ip: 13.84.161.159 [alert_level: High Risk [inbound(2)+outbound(0): 2 [target_port: 80 [class: I ... show more [bad_ip: 13.84.161.159 [alert_level: High Risk [inbound(2)+outbound(0): 2 [target_port: 80 [class: Information Leak [msg: ET WEB_SERVER WEB-PHP phpinfo access [csf_block_status: ip-already-blocked [blcheck_ip_score: 98.45% (3/193) [blcheck_domain: "bl.fmb.la,dnsbl.sorbs.net,dnsbl.spfbl.net" [blcheck_comment: "blcheck IPv4+IPv6 scanner v0.7.8 @ github.com/sofibox/blcheck" [log_suspicious_score: 5.26% [mod_security_alert: false [has_cidr24_network: false(1) show less	Port Scan
🇳🇱 CryptoYakari	2022-08-17 22:31:28 (3 years ago)	13.84.161.159 - - [18/Aug/2022:05:30:49 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 57616 "-" "Mozl ... show more 13.84.161.159 - - [18/Aug/2022:05:30:49 +0300] "GET /_profiler/phpinfo HTTP/1.0" 404 57616 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [18/Aug/2022:05:30:52 +0300] "GET /phpinfo HTTP/1.0" 404 57546 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [18/Aug/2022:05:31:04 +0300] "GET /aws.yml HTTP/1.0" 404 57546 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [18/Aug/2022:05:31:19 +0300] "GET /info.php HTTP/1.0" 404 57552 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 13.84.161.159 - - [18/Aug/202 ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 HoneyPot-DE	2022-08-17 16:51:19 (3 years ago)	Tried to access .env file	Web App Attack
🇩🇪 nextweb	2022-08-17 14:13:11 (3 years ago)	(mod_security) mod_security (id:210492) triggered by 13.84.161.159 (US/United States/Texas/San Anton ... show more (mod_security) mod_security (id:210492) triggered by 13.84.161.159 (US/United States/Texas/San Antonio/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force

Showing 1 to 15 of 159 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac1:76c0:518::41a:35

🇨🇳 218.25.89.208

🇺🇸 195.184.76.241

🇮🇳 103.207.9.246

🇲🇾 47.250.93.74

🇺🇸 44.163.240.216

🇺🇸 152.32.205.184

🇨🇳 106.13.95.100

🇺🇸 103.143.10.140

🇷🇴 92.118.39.50

🇺🇸 44.67.79.145

🇨🇳 220.202.112.234

🇱🇻 185.113.139.51

🇺🇸 184.105.3.43

🇮🇳 182.71.135.110

🇩🇪 167.94.145.24

🇺🇸 64.23.140.41

🇷🇺 62.183.19.54

🇺🇸 52.224.109.126

🇫🇷 37.187.32.181