52.13.9.64 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Bad user agent	2020-01-27 18:14:19

Comments on same subnet:

IP	Type	Details	Datetime
52.13.97.94	attackspam	Sep 25 15:53:06 xb3 sshd[19710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-13-97-94.us-west-2.compute.amazonaws.com Sep 25 15:53:08 xb3 sshd[19710]: Failed password for invalid user info from 52.13.97.94 port 45174 ssh2 Sep 25 15:53:08 xb3 sshd[19710]: Received disconnect from 52.13.97.94: 11: Bye Bye [preauth] Sep 25 15:57:00 xb3 sshd[18308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-13-97-94.us-west-2.compute.amazonaws.com Sep 25 15:57:02 xb3 sshd[18308]: Failed password for invalid user temp from 52.13.97.94 port 60022 ssh2 Sep 25 15:57:02 xb3 sshd[18308]: Received disconnect from 52.13.97.94: 11: Bye Bye [preauth] Sep 25 16:00:52 xb3 sshd[17151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-13-97-94.us-west-2.compute.amazonaws.com Sep 25 16:00:55 xb3 sshd[17151]: Failed password for invalid user student from 52.1........ -------------------------------	2019-09-27 08:52:13

Type

Details

Datetime

52.13.97.94

attackspam

Sep 25 15:53:06 xb3 sshd[19710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-13-97-94.us-west-2.compute.amazonaws.com
Sep 25 15:53:08 xb3 sshd[19710]: Failed password for invalid user info from 52.13.97.94 port 45174 ssh2
Sep 25 15:53:08 xb3 sshd[19710]: Received disconnect from 52.13.97.94: 11: Bye Bye [preauth]
Sep 25 15:57:00 xb3 sshd[18308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-13-97-94.us-west-2.compute.amazonaws.com
Sep 25 15:57:02 xb3 sshd[18308]: Failed password for invalid user temp from 52.13.97.94 port 60022 ssh2
Sep 25 15:57:02 xb3 sshd[18308]: Received disconnect from 52.13.97.94: 11: Bye Bye [preauth]
Sep 25 16:00:52 xb3 sshd[17151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-13-97-94.us-west-2.compute.amazonaws.com
Sep 25 16:00:55 xb3 sshd[17151]: Failed password for invalid user student from 52.1........
-------------------------------

2019-09-27 08:52:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.13.9.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48708
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.13.9.64.			IN	A

;; AUTHORITY SECTION:
.			345	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012700 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 18:14:16 CST 2020
;; MSG SIZE  rcvd: 114

Host info

64.9.13.52.in-addr.arpa domain name pointer ec2-52-13-9-64.us-west-2.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
64.9.13.52.in-addr.arpa	name = ec2-52-13-9-64.us-west-2.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
139.199.30.155	attackspam	May 4 23:40:57 ns381471 sshd[21290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.30.155 May 4 23:40:59 ns381471 sshd[21290]: Failed password for invalid user lrq from 139.199.30.155 port 40232 ssh2	2020-05-05 05:43:11
77.68.73.152	attackbotsspam	SSH Invalid Login	2020-05-05 06:14:00
125.124.180.71	attack	May 4 18:52:33 dns1 sshd[3156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.180.71 May 4 18:52:35 dns1 sshd[3156]: Failed password for invalid user surya from 125.124.180.71 port 58556 ssh2 May 4 18:57:00 dns1 sshd[3471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.180.71	2020-05-05 06:13:46
80.64.80.56	attackbotsspam	SSH brute-force: detected 15 distinct usernames within a 24-hour window.	2020-05-05 06:19:32
139.59.188.207	attackspam	5x Failed Password	2020-05-05 06:16:16
113.141.70.204	attack	[2020-05-04 17:49:25] NOTICE[1157] chan_sip.c: Registration from '"7070" ' failed for '113.141.70.204:5156' - Wrong password [2020-05-04 17:49:25] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-04T17:49:25.510-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7070",SessionID="0x7f5f1001be58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/113.141.70.204/5156",Challenge="35b66614",ReceivedChallenge="35b66614",ReceivedHash="b096b5e7d89aee28e2baadb4f3cec925" [2020-05-04 17:49:25] NOTICE[1157] chan_sip.c: Registration from '"7070" ' failed for '113.141.70.204:5156' - Wrong password [2020-05-04 17:49:25] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-04T17:49:25.770-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7070",SessionID="0x7f5f1009cfe8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-05-05 05:57:44
49.233.165.104	attackbotsspam	May 4 22:10:04 lock-38 sshd[1934174]: Disconnected from invalid user tiina 49.233.165.104 port 52612 [preauth] May 4 22:25:35 lock-38 sshd[1934618]: Invalid user sysop from 49.233.165.104 port 35082 May 4 22:25:35 lock-38 sshd[1934618]: Invalid user sysop from 49.233.165.104 port 35082 May 4 22:25:35 lock-38 sshd[1934618]: Failed password for invalid user sysop from 49.233.165.104 port 35082 ssh2 May 4 22:25:35 lock-38 sshd[1934618]: Disconnected from invalid user sysop 49.233.165.104 port 35082 [preauth] ...	2020-05-05 06:17:05
66.249.66.83	attackbotsspam	Automatic report - Banned IP Access	2020-05-05 05:55:17
118.89.116.13	attackbots	May 4 23:32:27 sso sshd[3219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.116.13 May 4 23:32:29 sso sshd[3219]: Failed password for invalid user samba from 118.89.116.13 port 50570 ssh2 ...	2020-05-05 05:45:16
139.155.82.119	attackbots	(sshd) Failed SSH login from 139.155.82.119 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 4 22:23:49 elude sshd[17160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.82.119 user=root May 4 22:23:51 elude sshd[17160]: Failed password for root from 139.155.82.119 port 52264 ssh2 May 4 22:25:31 elude sshd[17436]: Invalid user qifan from 139.155.82.119 port 41610 May 4 22:25:33 elude sshd[17436]: Failed password for invalid user qifan from 139.155.82.119 port 41610 ssh2 May 4 22:26:04 elude sshd[17527]: Invalid user gabby from 139.155.82.119 port 48822	2020-05-05 05:52:12
158.140.235.88	attack	failed_logins	2020-05-05 05:51:44
106.12.46.23	attackbotsspam	SSH Invalid Login	2020-05-05 05:54:08
172.94.53.140	attackbots	SSH bruteforce	2020-05-05 05:50:15
112.196.166.144	attackspambots	Found by fail2ban	2020-05-05 05:43:35
104.236.72.182	attack	SSH Invalid Login	2020-05-05 06:06:17

Recently Reported IPs

33.107.96.67	214.210.54.17	11.32.242.192	3.96.102.237
58.253.54.147	28.73.19.244	190.160.96.97	169.123.231.165
58.141.25.64	200.222.207.211	15.206.75.73	5.156.132.27
112.124.23.165	112.119.236.7	80.211.246.133	122.174.249.208
61.19.32.146	193.17.6.69	124.158.88.98	117.34.109.187