13.143.189.96

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
80% Critical
20 reports
14 reporters · latest 7 hours ago
ISP
SERV.HOST GROUP LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS207957
Domain Name
serv.host
Country
🇵🇱 Poland
City
Warsaw, Mazovia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 8 🇩🇪 Germany 3 🇦🇺 Australia 2
Most common categories Brute-Force 11 Web App Attack 8 Hacking 6 Bad Web Bot 4 SQL Injection 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇺 Bay13
CrowdSec:custom/crs
Web App Attack
🇩🇪 ecs.ge
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
Web App Attack Hacking
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 13.143.189.96 2026-11-04T12:40:39+0100 warning: unknown[13.143.189.96]: SASL authentication failed
Brute-Force
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24
(mod_security) mod_security triggered on hostname [redacted] 13.143.189.96 (US/United States/-)
SQL Injection
Anonymous
Web App Attack Port Scan SQL Injection Hacking
🇳🇱 Alt255
[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 13.143.189.96 - - [03/Nov/2026:23:08:38 +0100] "GET /backup.sql.gz HTTP/1.1" 404 9003 "-" "OwnSiteBackupAudit/1.3" ...
Bad Web Bot Web App Attack
Anonymous
IP matched detection query Detection of too many failed responses.
Brute-Force Bad Web Bot Hacking
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host Web App Attack
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 13.143.189.96 2026-11-03T16:41:31+0100 warning: unknown[13.143.189.96]: SASL authentication failed
Brute-Force
🇺🇸 etu brutus
13.143.189.96 has been banned for [WebApp Pipeline] ...
Hacking Bad Web Bot Web App Attack
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 13.143.189.96 2026-11-03T14:17:00+0100 warning: unknown[13.143.189.96]: SASL authentication failed
Brute-Force
🇫🇷 conseilgouz
coe-7 : Trying access unauthorized files/dir=>/tmp/917917.phtml
Hacking
🇨🇿 lp
Email account brute force: 1 attempts were recorded from 13.143.189.96 2026-11-03T06:55:36+0100 warning: unknown[13.143.189.96]: SASL authentication failed
Brute-Force
Anonymous
Magento custom-option PHP shell upload attempt (jail=magento-upload-exploit)
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 184.105.139.70
🇧🇩 172.68.132.160
🇰🇷 211.247.127.250
🇦🇷 190.112.21.241
🇮🇳 175.101.68.31
🇩🇪 172.71.172.131
🇨🇦 154.80.128.121
🇸🇪 83.209.249.224
🇺🇸 72.212.174.214
🇨🇳 60.208.176.8
🇲🇾 49.124.151.27
🇮🇳 49.43.90.199
🇺🇸 47.251.29.173
🇧🇷 45.224.234.145
🇬🇧 2.57.17.70
🇳🇱 195.178.110.227
🇧🇷 186.224.28.246
🇨🇳 123.188.213.220
🇸🇹 102.206.47.250
🇧🇬 93.183.135.211
feedback