13.52.240.49 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
13.52.240.178	attack	Bruteforce detected by fail2ban	2020-04-28 17:10:21
13.52.240.178	attack	Apr 27 22:04:43 ovpn sshd[18796]: Invalid user manny from 13.52.240.178 Apr 27 22:04:43 ovpn sshd[18796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.52.240.178 Apr 27 22:04:46 ovpn sshd[18796]: Failed password for invalid user manny from 13.52.240.178 port 52676 ssh2 Apr 27 22:04:46 ovpn sshd[18796]: Received disconnect from 13.52.240.178 port 52676:11: Bye Bye [preauth] Apr 27 22:04:46 ovpn sshd[18796]: Disconnected from 13.52.240.178 port 52676 [preauth] Apr 27 22:11:02 ovpn sshd[20395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.52.240.178 user=r.r Apr 27 22:11:05 ovpn sshd[20395]: Failed password for r.r from 13.52.240.178 port 46106 ssh2 Apr 27 22:11:05 ovpn sshd[20395]: Received disconnect from 13.52.240.178 port 46106:11: Bye Bye [preauth] Apr 27 22:11:05 ovpn sshd[20395]: Disconnected from 13.52.240.178 port 46106 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/	2020-04-28 06:10:32

Type

Details

Datetime

13.52.240.178

attack

Bruteforce detected by fail2ban

2020-04-28 17:10:21

13.52.240.178

attack

Apr 27 22:04:43 ovpn sshd[18796]: Invalid user manny from 13.52.240.178
Apr 27 22:04:43 ovpn sshd[18796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.52.240.178
Apr 27 22:04:46 ovpn sshd[18796]: Failed password for invalid user manny from 13.52.240.178 port 52676 ssh2
Apr 27 22:04:46 ovpn sshd[18796]: Received disconnect from 13.52.240.178 port 52676:11: Bye Bye [preauth]
Apr 27 22:04:46 ovpn sshd[18796]: Disconnected from 13.52.240.178 port 52676 [preauth]
Apr 27 22:11:02 ovpn sshd[20395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.52.240.178  user=r.r
Apr 27 22:11:05 ovpn sshd[20395]: Failed password for r.r from 13.52.240.178 port 46106 ssh2
Apr 27 22:11:05 ovpn sshd[20395]: Received disconnect from 13.52.240.178 port 46106:11: Bye Bye [preauth]
Apr 27 22:11:05 ovpn sshd[20395]: Disconnected from 13.52.240.178 port 46106 [preauth]

........
-----------------------------------------------
https://www.blocklist.de/

2020-04-28 06:10:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.52.240.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64276
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;13.52.240.49.			IN	A

;; AUTHORITY SECTION:
.			552	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:06:48 CST 2022
;; MSG SIZE  rcvd: 105

Host info

49.240.52.13.in-addr.arpa domain name pointer ec2-13-52-240-49.us-west-1.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
49.240.52.13.in-addr.arpa	name = ec2-13-52-240-49.us-west-1.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
91.93.168.162	attackspambots	1578631877 - 01/10/2020 05:51:17 Host: 91.93.168.162/91.93.168.162 Port: 445 TCP Blocked	2020-01-10 17:37:41
185.209.0.32	attack	Jan 10 09:41:15 debian-2gb-nbg1-2 kernel: \[904986.256652\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.32 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=16083 PROTO=TCP SPT=45196 DPT=34500 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-10 17:15:50
185.58.205.244	attackbotsspam	Jan 7 06:20:02 venus sshd[6958]: Invalid user eem from 185.58.205.244 port 57580 Jan 7 06:20:05 venus sshd[6958]: Failed password for invalid user eem from 185.58.205.244 port 57580 ssh2 Jan 7 06:29:28 venus sshd[8124]: Invalid user hos from 185.58.205.244 port 53054 Jan 7 06:29:30 venus sshd[8124]: Failed password for invalid user hos from 185.58.205.244 port 53054 ssh2 Jan 7 06:32:57 venus sshd[8508]: Invalid user apache2 from 185.58.205.244 port 44594 Jan 7 06:32:59 venus sshd[8508]: Failed password for invalid user apache2 from 185.58.205.244 port 44594 ssh2 Jan 7 06:36:05 venus sshd[8891]: Invalid user tester from 185.58.205.244 port 36140 Jan 7 06:36:07 venus sshd[8891]: Failed password for invalid user tester from 185.58.205.244 port 36140 ssh2 Jan 7 06:39:03 venus sshd[9273]: Invalid user from 185.58.205.244 port 55920 Jan 7 06:39:06 venus sshd[9273]: Failed password for invalid user from 185.58.205.244 port 55920 ssh2 Jan 7 06:42:09 venus sshd[9712]........ ------------------------------	2020-01-10 17:19:12
217.138.76.66	attackspambots	Jan 10 05:52:07 MK-Soft-Root2 sshd[16218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.138.76.66 Jan 10 05:52:08 MK-Soft-Root2 sshd[16218]: Failed password for invalid user qxg from 217.138.76.66 port 39990 ssh2 ...	2020-01-10 17:07:32
118.24.82.81	attack	Jan 10 04:51:42 *** sshd[24223]: User root from 118.24.82.81 not allowed because not listed in AllowUsers	2020-01-10 17:22:03
222.186.30.35	attackbotsspam	Jan 10 06:03:34 firewall sshd[25858]: Failed password for root from 222.186.30.35 port 41428 ssh2 Jan 10 06:03:35 firewall sshd[25858]: Failed password for root from 222.186.30.35 port 41428 ssh2 Jan 10 06:03:38 firewall sshd[25858]: Failed password for root from 222.186.30.35 port 41428 ssh2 ...	2020-01-10 17:16:33
188.166.239.106	attackbotsspam	Jan 10 08:59:06 XXX sshd[18269]: Invalid user Administrator from 188.166.239.106 port 37658	2020-01-10 17:21:47
62.180.9.125	attackbotsspam	Unauthorised access (Jan 10) SRC=62.180.9.125 LEN=76 TTL=55 ID=54543 DF TCP DPT=445 WINDOW=5840 SYN	2020-01-10 17:38:29
49.88.65.107	attack	Jan 10 05:52:07 grey postfix/smtpd\[821\]: NOQUEUE: reject: RCPT from unknown\[49.88.65.107\]: 554 5.7.1 Service unavailable\; Client host \[49.88.65.107\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.88.65.107\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-10 17:08:54
115.31.172.51	attackbots	Jan 6 02:38:59 pl3server sshd[19722]: Invalid user Amalia from 115.31.172.51 Jan 6 02:38:59 pl3server sshd[19722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.31.172.51 Jan 6 02:39:02 pl3server sshd[19722]: Failed password for invalid user Amalia from 115.31.172.51 port 44603 ssh2 Jan 6 02:39:02 pl3server sshd[19722]: Received disconnect from 115.31.172.51: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=115.31.172.51	2020-01-10 17:22:57
92.118.37.86	attackbots	Jan 10 10:02:53 debian-2gb-nbg1-2 kernel: \[906284.332903\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.86 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=14033 PROTO=TCP SPT=52979 DPT=4979 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-10 17:08:32
222.181.205.137	attack	Unauthorised access (Jan 10) SRC=222.181.205.137 LEN=40 TTL=117 ID=18627 TCP DPT=1433 WINDOW=1024 SYN	2020-01-10 17:12:18
94.191.111.115	attackspam	Jan 10 09:53:26 localhost sshd\[10243\]: Invalid user admin from 94.191.111.115 port 37846 Jan 10 09:53:26 localhost sshd\[10243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.111.115 Jan 10 09:53:28 localhost sshd\[10243\]: Failed password for invalid user admin from 94.191.111.115 port 37846 ssh2	2020-01-10 17:29:13
49.234.150.207	attack	Jan 9 20:37:01 hanapaa sshd\[32390\]: Invalid user lux from 49.234.150.207 Jan 9 20:37:01 hanapaa sshd\[32390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.150.207 Jan 9 20:37:03 hanapaa sshd\[32390\]: Failed password for invalid user lux from 49.234.150.207 port 47900 ssh2 Jan 9 20:39:28 hanapaa sshd\[32749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.150.207 user=root Jan 9 20:39:30 hanapaa sshd\[32749\]: Failed password for root from 49.234.150.207 port 34484 ssh2	2020-01-10 17:24:59
201.48.170.252	attackbotsspam	Jan 10 08:47:38 ourumov-web sshd\[11686\]: Invalid user geraldo from 201.48.170.252 port 52698 Jan 10 08:47:38 ourumov-web sshd\[11686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.170.252 Jan 10 08:47:40 ourumov-web sshd\[11686\]: Failed password for invalid user geraldo from 201.48.170.252 port 52698 ssh2 ...	2020-01-10 17:25:29

Recently Reported IPs

13.52.242.242	13.52.242.246	13.52.24.180	13.52.243.234
13.52.243.67	13.52.243.142	13.52.243.97	13.52.247.112
13.52.246.127	13.52.247.249	13.52.247.13	13.52.246.244
13.52.248.162	13.52.248.40	13.52.250.173	13.52.246.68
13.52.250.233	13.52.250.71	13.52.253.139	13.52.250.107