JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

13.90.241.80

Neutral Activity

Abuse Confidence Score

0% Low Risk

33 reports

25 reporters · latest 11 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇺🇸 United States of America
City: Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.90.241.80 has been reported 33 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

33 from 25 distinct reporters

First reported

December 3rd 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 [email protected]	2025-12-05 00:41:33 UTC · (11 months ago)	...	Brute-Force SSH
🇳🇱 homeshowdomain.nl	2025-12-04 23:01:32 UTC · (11 months ago)	Auto-ban: 219 malicious requests on 2025-12-03 (e.g., env/backup probes, brute-force, or error bursts).	Hacking Web App Attack SSH
🇺🇸 octageeks.com	2025-12-04 05:06:23 UTC · (11 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇩🇪 bsoft.de	2025-12-03 17:15:10 UTC · (11 months ago)	13.90.241.80 - - [03/Dec/2025:18:14:41 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 980 "-" "-" 13.90.241.80 - - [03/Dec/2025:18:15:01 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 404 94472 "-" "-" 13.90.241.80 - - [03/Dec/2025:18: ... show more 13.90.241.80 - - [03/Dec/2025:18:14:41 +0100] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 980 "-" "-" 13.90.241.80 - - [03/Dec/2025:18:15:01 +0100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 404 94472 "-" "-" 13.90.241.80 - - [03/Dec/2025:18:15:08 +0100] "GET /wp-content/wp-login.php HTTP/1.1" 404 94433 "-" "-" show less	Web App Attack
🇩🇪 paissangroup	2025-12-03 17:08:44 UTC · (11 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 outputblog.de	2025-12-03 16:59:15 UTC · (11 months ago)	[Wed Dec 03 17:58:56.253254 2025] [authz_core:error] [pid 991179:tid 991179] [client 13.90.241.80:2131] AH01630: client denied by server configuration: /var/www/html/wp-content/sxx.php [Wed Dec 03 17:59:07.451608 2025] [access_compat:error] [pid 9911 ... show more [Wed Dec 03 17:58:56.253254 2025] [authz_core:error] [pid 991179:tid 991179] [client 13.90.241.80:2131] AH01630: client denied by server configuration: /var/www/html/wp-content/sxx.php [Wed Dec 03 17:59:07.451608 2025] [access_compat:error] [pid 991179:tid 991179] [client 13.90.241.80:2131] AH01797: client denied by server configuration: /var/www/html/wp-includes/css/thems.php [Wed Dec 03 17:59:07.687060 2025] [access_compat:error] [pid 991179:tid 991179] [client 13.90.241.80:2131] AH01797: client denied by server configuration: /var/www/html/wp-includes/defaults.php [Wed Dec 03 17:59:09.030265 2025] [access_compat:error] [pid 991179:tid 991179] [client 13.90.241.80:2131] AH01797: client denied by server configuration: /var/www/html/wp-includes/ID3/module.tag.id3v3.php [Wed Dec 03 17:59:11.350237 2025] [access_compat:error] [pid 991179:tid 991179] [client 13.90.241.80:2131] AH01797: client denied by server configuration: /var/www/html/wp-includes/class-ftps.php [Wed Dec 03 17:59:14.547 ... show less	Hacking Brute-Force
🇬🇧 Apache	2025-12-03 16:56:16 UTC · (11 months ago)	(mod_security) mod_security (id:20000010) triggered by 13.90.241.80 (US/United States/-): 5 in the last 300 secs	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 16:34:07 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 13.90.241.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 11:34:02.683941 2025] [security2:error] [pid 15888:tid 15916] [client 13.90.241.80:2120] ModS ... show more (mod_security) mod_security (id:210730) triggered by 13.90.241.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 11:34:02.683941 2025] [security2:error] [pid 15888:tid 15916] [client 13.90.241.80:2120] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|12am.us\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "12am.us"] [uri "/wp-admin/includes/class-wp-filesystem-base.php.bak"] [unique_id "aTBmes2jnkR-9mPyHQwPgwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 16:17:00 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 13.90.241.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 11:16:55.250880 2025] [security2:error] [pid 31011:tid 31011] [client 13.90.241.80:2112] ModS ... show more (mod_security) mod_security (id:210730) triggered by 13.90.241.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 11:16:55.250880 2025] [security2:error] [pid 31011:tid 31011] [client 13.90.241.80:2112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|powerbypage.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "powerbypage.com"] [uri "/wp-admin/includes/class-wp-filesystem-base.php.bak"] [unique_id "aTBidygCKO_VRRV88AOOCwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-12-03 15:59:56 UTC · (11 months ago)	Blocking for trying to access an exploit file: /beence.php	Hacking
🇩🇪 Mr-Money	2025-12-03 15:26:58 UTC · (11 months ago)	scenario: crowdsecurity/http-probing - events: 11	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 15:19:23 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 13.90.241.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 10:19:19.283066 2025] [security2:error] [pid 27605:tid 27605] [client 13.90.241.80:2127] ModS ... show more (mod_security) mod_security (id:210730) triggered by 13.90.241.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 10:19:19.283066 2025] [security2:error] [pid 27605:tid 27605] [client 13.90.241.80:2127] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.brtc.us\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.brtc.us"] [uri "/wp-admin/includes/class-wp-filesystem-base.php.bak"] [unique_id "aTBU9zZVHUyOXHaRMoX57gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-03 15:06:29 UTC · (11 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2025-12-03 14:53:02 UTC · (11 months ago)	(mod_security) mod_security (id:210730) triggered by 13.90.241.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 09:52:54.867045 2025] [security2:error] [pid 18486:tid 18486] [client 13.90.241.80:2115] ModS ... show more (mod_security) mod_security (id:210730) triggered by 13.90.241.80 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 09:52:54.867045 2025] [security2:error] [pid 18486:tid 18486] [client 13.90.241.80:2115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scottcarper.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scottcarper.com"] [uri "/wp-admin/includes/class-wp-filesystem-base.php.bak"] [unique_id "aTBOxh_o2R26Eq7WMqdQhQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Petros Stefanakis	2025-12-03 14:41:15 UTC · (11 months ago)	(mod_security) mod_security triggered on hostname [redacted] 13.90.241.80 (US/United States/-)	SQL Injection

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 185.216.145.166

🇨🇳 120.15.35.108

🇧🇩 103.159.2.113

🇺🇸 91.230.168.122

🇩🇪 69.5.169.185

🇻🇪 190.207.83.56

🇨🇱 181.42.187.37

🇧🇷 179.228.156.253

🇳🇱 109.160.32.168

🇮🇹 109.117.111.91

🇳🇱 93.123.109.9

🇧🇬 78.128.114.174

🇩🇪 69.5.169.22

🇨🇳 58.222.72.182

🇸🇬 47.79.201.254

🇺🇸 24.145.2.67

🇧🇷 179.223.202.161

🇱🇺 172.255.251.68

🇸🇬 159.65.15.189

🇳🇱 86.38.187.12