JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.94.35.121

13.94.35.121 was found in our database!

This IP was reported 160 times. Confidence of Abuse is 24%: ?

24%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.94.35.121

Whois 13.94.35.121

IP Abuse Reports for 13.94.35.121:

This IP address has been reported a total of 160 times from 83 distinct sources. 13.94.35.121 was first reported on March 3rd 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 06:13:21 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 13.94.35.121 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 13.94.35.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 02:13:17.233244 2026] [security2:error] [pid 25019:tid 25029] [client 13.94.35.121:40069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.testproperty.pref-realestate.com"] [uri "/wp-config.php.orig"] [unique_id "aqzWfeCVmZ6wBlhhbQZirgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 10:00:46 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 13.94.35.121 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 13.94.35.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:00:43.426907 2026] [security2:error] [pid 22647:tid 22647] [client 13.94.35.121:1878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scrunchiebuttbikinis.com"] [uri "/wp-config.php~"] [unique_id "aqu6S31l-sQryqQOhK9GjQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-17 00:22:32 (1 week ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 13.94.35.121 (HK/Hong Kong/-): 1 in t ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 13.94.35.121 (HK/Hong Kong/-): 1 in the last 3600 secs (0-195) show less	Hacking
Anonymous	2026-09-16 09:23:49 (2 weeks ago)	[16/Sep/2026:19:23:48 +1000] "POST / HTTP/1.1" 301 281 "Mozilla/5.0"	Hacking Web App Attack
🇨🇿 Countryman	2026-09-15 08:08:37 (2 weeks ago)	IPS detection: React.Server.Components.react-flight.Remote.Code.Execution	Hacking
🇨🇿 Countryman	2026-09-15 08:08:37 (2 weeks ago)	IPS detection: React.Server.Components.react-flight.Remote.Code.Execution	Hacking
🇨🇿 Countryman	2026-09-15 08:08:37 (2 weeks ago)	IPS detection: React.Server.Components.react-flight.Remote.Code.Execution	Hacking
🇮🇳 evicky2002	2026-04-30 13:04:29 (5 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 gooko	2026-04-29 15:19:42 (5 months ago)	SSH brute-force attack detected by fail2ban jail 'sshd'	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-06 00:44:59 (5 months ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/13.94.35.121	SSH
🇫🇷 applemooz	2026-04-05 09:30:24 (5 months ago)	Apr 5 11:25:04 lnxmail62 sshd[239423]: Invalid user dev from 13.94.35.121 port 15879 Apr 5 11:25:0 ... show more Apr 5 11:25:04 lnxmail62 sshd[239423]: Invalid user dev from 13.94.35.121 port 15879 Apr 5 11:25:04 lnxmail62 sshd[239423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.35.121 Apr 5 11:25:05 lnxmail62 sshd[239423]: Failed password for invalid user dev from 13.94.35.121 port 15879 ssh2 Apr 5 11:30:23 lnxmail62 sshd[242246]: Invalid user dev from 13.94.35.121 port 15936 Apr 5 11:30:23 lnxmail62 sshd[242246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.35.121 ... show less	Brute-Force SSH
Anonymous	2026-04-05 09:30:16 (5 months ago)	2026-04-05T11:30:13.570918 localhost.localdomain sshd[1936081]: pam_unix(sshd:auth): authentication ... show more 2026-04-05T11:30:13.570918 localhost.localdomain sshd[1936081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.35.121 2026-04-05T11:30:16.007354 localhost.localdomain sshd[1936081]: Failed password for invalid user dev from 13.94.35.121 port 15940 ssh2 ... show less	Brute-Force SSH
🇫🇷 Max la Menace	2026-04-05 09:24:25 (5 months ago)	2026-04-05T10:11:50.146752+01:00 ns3124905 sshd-session[770825]: pam_unix(sshd:auth): authentication ... show more 2026-04-05T10:11:50.146752+01:00 ns3124905 sshd-session[770825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.35.121 2026-04-05T10:11:51.902853+01:00 ns3124905 sshd-session[770825]: Failed password for invalid user dev from 13.94.35.121 port 15881 ssh2 2026-04-05T10:24:25.102369+01:00 ns3124905 sshd-session[772747]: Invalid user dev from 13.94.35.121 port 15873 ... show less	Brute-Force SSH
Anonymous	2026-04-05 09:23:59 (5 months ago)	sshd	Brute-Force SSH
🇫🇷 900cm	2026-04-05 09:20:19 (5 months ago)	Apr 5 11:20:19 raspberrypi sshd[2226]: Invalid user dev from 13.94.35.121 port 15943 ...	Port Scan Brute-Force SSH

Showing 1 to 15 of 160 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 152.32.245.215

🇪🇸 103.23.61.174

🇳🇱 34.6.50.130

🇳🇱 89.105.192.102

🇧🇷 69.6.222.101

🇱🇹 62.60.130.242

🇮🇳 52.140.37.85

🇳🇱 45.148.10.151

🇺🇸 172.174.235.111

🇺🇸 129.121.140.71

🇸🇬 101.47.15.26

🇺🇦 91.208.194.40

🇨🇦 84.20.25.137

🇳🇱 77.239.124.155

🇨🇳 58.42.8.7

🇦🇷 38.52.89.22

🇬🇧 35.234.136.205

🇻🇪 201.249.192.30

🇹🇳 197.244.85.123

🇬🇧 195.206.182.196