Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
13.48.123.50 attackbotsspam
Unauthorized connection attempt detected, IP banned.
2020-02-01 13:42:31
13.48.124.150 attack
B: File scanning
2020-02-01 08:01:25
13.48.126.162 attackspam
[FriJan3122:16:12.4454482020][:error][pid12116:tid47392789350144][client13.48.126.162:53860][client13.48.126.162]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"211"][id"390709"][rev"30"][msg"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely"][data"/.env"][severity"CRITICAL"][hostname"www.sequoiarealestate.ch"][uri"/.env"][unique_id"XjSZHF8UQQXcjZxrK4YNlQAAAY4"][FriJan3122:34:11.3826442020][:error][pid12204:tid47392783046400][client13.48.126.162:56612][client13.48.126.162]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|htt
2020-02-01 07:10:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.48.12.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4066
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;13.48.12.0.			IN	A

;; AUTHORITY SECTION:
.			374	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:24:31 CST 2022
;; MSG SIZE  rcvd: 103
Host info
0.12.48.13.in-addr.arpa domain name pointer ec2-13-48-12-0.eu-north-1.compute.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
0.12.48.13.in-addr.arpa	name = ec2-13-48-12-0.eu-north-1.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
92.50.249.166 attack
2020-05-05T01:52:55.350932shield sshd\[27455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.166  user=root
2020-05-05T01:52:56.983054shield sshd\[27455\]: Failed password for root from 92.50.249.166 port 46434 ssh2
2020-05-05T01:56:37.314385shield sshd\[29153\]: Invalid user admin from 92.50.249.166 port 54864
2020-05-05T01:56:37.317887shield sshd\[29153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.166
2020-05-05T01:56:39.426659shield sshd\[29153\]: Failed password for invalid user admin from 92.50.249.166 port 54864 ssh2
2020-05-05 10:02:06
202.29.80.140 attack
Port probing on unauthorized port 3389
2020-05-05 10:09:59
218.92.0.211 attackbots
May  5 03:45:12 MainVPS sshd[3459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211  user=root
May  5 03:45:13 MainVPS sshd[3459]: Failed password for root from 218.92.0.211 port 64352 ssh2
May  5 03:45:15 MainVPS sshd[3459]: Failed password for root from 218.92.0.211 port 64352 ssh2
May  5 03:45:12 MainVPS sshd[3459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211  user=root
May  5 03:45:13 MainVPS sshd[3459]: Failed password for root from 218.92.0.211 port 64352 ssh2
May  5 03:45:15 MainVPS sshd[3459]: Failed password for root from 218.92.0.211 port 64352 ssh2
May  5 03:45:12 MainVPS sshd[3459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211  user=root
May  5 03:45:13 MainVPS sshd[3459]: Failed password for root from 218.92.0.211 port 64352 ssh2
May  5 03:45:15 MainVPS sshd[3459]: Failed password for root from 218.92.0.211 port 64352 ssh2
May  5 03:
2020-05-05 09:55:36
51.83.255.172 attackspambots
May  5 01:11:58 scw-6657dc sshd[13975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.255.172
May  5 01:11:58 scw-6657dc sshd[13975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.255.172
May  5 01:12:00 scw-6657dc sshd[13975]: Failed password for invalid user emerson from 51.83.255.172 port 38480 ssh2
...
2020-05-05 10:06:57
35.224.93.149 attackbotsspam
May  5 03:12:25 vps647732 sshd[6148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.224.93.149
May  5 03:12:27 vps647732 sshd[6148]: Failed password for invalid user applprod from 35.224.93.149 port 36898 ssh2
...
2020-05-05 09:40:16
42.112.95.186 attackspambots
20/5/4@21:12:15: FAIL: Alarm-Network address from=42.112.95.186
...
2020-05-05 09:54:53
180.153.63.9 attack
May  5 03:25:09 meumeu sshd[21031]: Failed password for root from 180.153.63.9 port 57837 ssh2
May  5 03:29:25 meumeu sshd[21820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.153.63.9 
May  5 03:29:28 meumeu sshd[21820]: Failed password for invalid user aditya from 180.153.63.9 port 57951 ssh2
...
2020-05-05 09:45:22
92.63.194.105 attackspambots
Total attacks: 18
2020-05-05 09:34:05
144.217.255.89 attackbotsspam
Observed on multiple hosts.
2020-05-05 10:04:57
180.100.214.87 attackspambots
May  5 03:38:05 legacy sshd[18852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.100.214.87
May  5 03:38:07 legacy sshd[18852]: Failed password for invalid user ankit from 180.100.214.87 port 45032 ssh2
May  5 03:41:11 legacy sshd[18980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.100.214.87
...
2020-05-05 09:44:51
211.161.90.99 attackspam
211.161.90.99 - - [05/May/2020:03:11:41 +0200] "POST /wp-login.php HTTP/1.1" 200 6044 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
211.161.90.99 - - [05/May/2020:03:11:43 +0200] "POST /wp-login.php HTTP/1.1" 200 6044 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
211.161.90.99 - - [05/May/2020:03:11:46 +0200] "POST /wp-login.php HTTP/1.1" 200 6044 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
211.161.90.99 - - [05/May/2020:03:11:48 +0200] "POST /wp-login.php HTTP/1.1" 200 6044 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
211.161.90.99 - - [05/May/2020:03:11:49 +0200] "POST /wp-login.php HTTP/1.1" 200 6044 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
211.161.90.99 - - [05/May/2020
...
2020-05-05 10:11:11
89.207.108.59 attack
May  4 21:12:18 Tower sshd[42900]: Connection from 89.207.108.59 port 60066 on 192.168.10.220 port 22 rdomain ""
May  4 21:12:19 Tower sshd[42900]: Failed password for root from 89.207.108.59 port 60066 ssh2
May  4 21:12:19 Tower sshd[42900]: Received disconnect from 89.207.108.59 port 60066:11: Bye Bye [preauth]
May  4 21:12:19 Tower sshd[42900]: Disconnected from authenticating user root 89.207.108.59 port 60066 [preauth]
2020-05-05 09:38:54
132.232.4.140 attackbots
2020-05-05T01:40:44.893385shield sshd\[22070\]: Invalid user newuser from 132.232.4.140 port 56226
2020-05-05T01:40:44.897145shield sshd\[22070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.140
2020-05-05T01:40:46.840763shield sshd\[22070\]: Failed password for invalid user newuser from 132.232.4.140 port 56226 ssh2
2020-05-05T01:46:29.941858shield sshd\[24668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.140  user=nobody
2020-05-05T01:46:31.584006shield sshd\[24668\]: Failed password for nobody from 132.232.4.140 port 40204 ssh2
2020-05-05 09:49:11
124.193.185.98 attack
Observed on multiple hosts.
2020-05-05 10:10:24
82.99.203.76 attackbotsspam
proto=tcp  .  spt=41126  .  dpt=25  .     Found on   Dark List de      (41)
2020-05-05 09:46:20

Recently Reported IPs

13.48.141.142 13.48.159.79 13.48.155.41 13.48.174.242
13.48.189.184 13.48.173.203 13.48.232.145 13.48.72.176
13.48.240.85 13.48.92.235 13.48.53.10 13.48.81.204
13.49.145.245 13.49.166.13 13.49.181.137 13.48.83.212
13.49.195.89 13.49.199.225 13.49.37.190 13.49.71.87