Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
13.56.237.146 attack
13.56.237.146 - - [29/Aug/2020:22:28:49 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
13.56.237.146 - - [29/Aug/2020:22:28:50 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
13.56.237.146 - - [29/Aug/2020:22:28:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-30 04:38:56
13.56.212.227 attackbotsspam
port scan and connect, tcp 80 (http)
2020-08-10 19:00:50
13.56.251.57 attackspambots
Unauthorized connection attempt detected from IP address 13.56.251.57 to port 8080
2020-06-13 08:05:11
13.56.214.11 attackspambots
Apr 11 19:23:42 gw1 sshd[25515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.56.214.11
Apr 11 19:23:43 gw1 sshd[25515]: Failed password for invalid user Qwerty123 from 13.56.214.11 port 42726 ssh2
...
2020-04-12 00:56:35
13.56.213.141 attackbotsspam
*Port Scan* detected from 13.56.213.141 (US/United States/ec2-13-56-213-141.us-west-1.compute.amazonaws.com). 4 hits in the last 110 seconds
2020-02-29 13:39:17
13.56.233.74 attackspambots
Unauthorized connection attempt detected from IP address 13.56.233.74 to port 8181
2019-12-30 05:08:43
13.56.245.182 attackspam
Dec  9 08:27:58 server6 sshd[28226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-56-245-182.us-west-1.compute.amazonaws.com
Dec  9 08:28:00 server6 sshd[28226]: Failed password for invalid user boulet from 13.56.245.182 port 51014 ssh2
Dec  9 08:28:01 server6 sshd[28226]: Received disconnect from 13.56.245.182: 11: Bye Bye [preauth]
Dec  9 08:35:42 server6 sshd[21382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-56-245-182.us-west-1.compute.amazonaws.com
Dec  9 08:35:44 server6 sshd[21382]: Failed password for invalid user spam from 13.56.245.182 port 36018 ssh2
Dec  9 08:35:44 server6 sshd[21382]: Received disconnect from 13.56.245.182: 11: Bye Bye [preauth]
Dec  9 08:40:52 server6 sshd[3872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-56-245-182.us-west-1.compute.amazonaws.com  user=lp
Dec  9 08:40:55 server6 sshd[38........
-------------------------------
2019-12-11 03:14:18
13.56.245.182 attack
Dec  9 08:27:58 server6 sshd[28226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-56-245-182.us-west-1.compute.amazonaws.com
Dec  9 08:28:00 server6 sshd[28226]: Failed password for invalid user boulet from 13.56.245.182 port 51014 ssh2
Dec  9 08:28:01 server6 sshd[28226]: Received disconnect from 13.56.245.182: 11: Bye Bye [preauth]
Dec  9 08:35:42 server6 sshd[21382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-56-245-182.us-west-1.compute.amazonaws.com
Dec  9 08:35:44 server6 sshd[21382]: Failed password for invalid user spam from 13.56.245.182 port 36018 ssh2
Dec  9 08:35:44 server6 sshd[21382]: Received disconnect from 13.56.245.182: 11: Bye Bye [preauth]
Dec  9 08:40:52 server6 sshd[3872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-56-245-182.us-west-1.compute.amazonaws.com  user=lp
Dec  9 08:40:55 server6 sshd[38........
-------------------------------
2019-12-10 17:32:51
13.56.223.168 attackspambots
Brute forcing RDP port 3389
2019-12-03 08:11:27
13.56.228.202 attackspam
Trying ports that it shouldn't be.
2019-09-05 15:49:27
13.56.226.103 attackbotsspam
Many RDP login attempts detected by IDS script
2019-07-11 12:18:40
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.56.2.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46016
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;13.56.2.164.			IN	A

;; AUTHORITY SECTION:
.			137	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:07:44 CST 2022
;; MSG SIZE  rcvd: 104
Host info
164.2.56.13.in-addr.arpa domain name pointer ec2-13-56-2-164.us-west-1.compute.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
164.2.56.13.in-addr.arpa	name = ec2-13-56-2-164.us-west-1.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
88.255.217.68 attack
Automatic report - Port Scan Attack
2020-09-29 22:42:53
163.44.149.204 attackbotsspam
SSH Brute Force
2020-09-29 22:52:46
112.85.42.67 attack
Sep 29 16:21:58 mail sshd[7685]: refused connect from 112.85.42.67 (112.85.42.67)
Sep 29 16:22:49 mail sshd[7756]: refused connect from 112.85.42.67 (112.85.42.67)
Sep 29 16:23:43 mail sshd[7840]: refused connect from 112.85.42.67 (112.85.42.67)
Sep 29 16:24:37 mail sshd[7955]: refused connect from 112.85.42.67 (112.85.42.67)
Sep 29 16:25:29 mail sshd[8068]: refused connect from 112.85.42.67 (112.85.42.67)
...
2020-09-29 22:29:00
181.51.144.84 attackbotsspam
Sep 28 20:38:32 IngegnereFirenze sshd[30580]: Did not receive identification string from 181.51.144.84 port 50361
...
2020-09-29 22:31:17
49.233.147.147 attackspam
Invalid user t from 49.233.147.147 port 39548
2020-09-29 22:54:23
138.197.200.16 attackspambots
Sep 29 16:48:51 OPSO sshd\[3555\]: Invalid user guest from 138.197.200.16 port 45332
Sep 29 16:48:51 OPSO sshd\[3555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.16
Sep 29 16:48:53 OPSO sshd\[3555\]: Failed password for invalid user guest from 138.197.200.16 port 45332 ssh2
Sep 29 16:54:45 OPSO sshd\[4639\]: Invalid user sales from 138.197.200.16 port 60858
Sep 29 16:54:45 OPSO sshd\[4639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.16
2020-09-29 23:01:55
196.201.20.182 attackspam
Honeypot hit.
2020-09-29 22:50:14
51.83.42.212 attackbots
Repeated brute force against a port
2020-09-29 22:53:29
45.129.33.154 attackbots
Sep 29 15:53:27 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=45.129.33.154 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=44950 PROTO=TCP SPT=49885 DPT=44048 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 15:53:44 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=45.129.33.154 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=64140 PROTO=TCP SPT=49885 DPT=33307 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 15:53:57 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=45.129.33.154 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=719 PROTO=TCP SPT=49885 DPT=55029 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 15:54:44 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=45.129.33.154 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=3429 PROTO=TCP SPT=49885 DPT=30046 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 15:54:46 *hidden* ke
...
2020-09-29 22:45:11
201.99.106.67 attackbotsspam
Invalid user ansible from 201.99.106.67 port 48097
2020-09-29 22:38:12
62.211.97.105 attackspambots
Icarus honeypot on github
2020-09-29 22:37:50
129.146.81.43 attackbots
2020-09-28 UTC: (31x) - Joshua,ariel,arun,backup,best,contador,dave,dc,demo1,deploy,elastic,git,info,iso,lijia,lucas,max,nagios,nodejs,nproc,query,root(7x),root1,rs,wayne
2020-09-29 22:55:03
119.123.226.56 attackbots
Invalid user grace from 119.123.226.56 port 2860
2020-09-29 23:07:24
189.220.193.199 attackbots
Sep 28 22:38:12 mellenthin postfix/smtpd[9356]: NOQUEUE: reject: RCPT from 189.220.193.199.cable.dyn.cableonline.com.mx[189.220.193.199]: 554 5.7.1 Service unavailable; Client host [189.220.193.199] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/189.220.193.199; from= to= proto=ESMTP helo=<189.220.193.199.cable.dyn.cableonline.com.mx>
2020-09-29 22:45:45
198.211.107.224 attackspambots
Invalid user simon from 198.211.107.224 port 48298
2020-09-29 22:38:32

Recently Reported IPs

13.56.193.41 13.56.2.93 13.56.20.208 13.56.20.184
13.56.20.61 13.56.20.64 13.56.20.249 13.56.20.89
13.56.20.66 13.56.20.94 13.56.200.183 13.56.200.138
13.56.200.245 13.56.200.124 13.56.202.26 13.56.200.95
13.56.200.56 13.56.205.228 13.56.205.68 13.56.205.3