13.48.178.183

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
56 reports
49 reporters · latest 17 minutes ago
ISP
Amazon Data Services Sweden
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
ec2-13-48-178-183.eu-north-1.compute.amazonaws.com
Domain Name
amazon.com
Country
🇸🇪 Sweden
City
Stockholm, Stockholm
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
56 from 49 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 14 🇺🇸 United States of America 12 🇳🇱 Netherlands 7
Most common categories Web App Attack 50 Bad Web Bot 18 Brute-Force 17 Hacking 13 Port Scan 6
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 sc user
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot Web App Attack Port Scan
🇬🇧 openstrike.co.uk
5 attacks on env grabbing URLs: HEAD /.env.production HTTP/1.1
Hacking
🇧🇪 taivas.nl
Many_bad_calls
Web App Attack
🇱🇻 radix
Automated probing for sensitive configuration files and environment leaks.
Brute-Force Web App Attack
🇧🇪 cmbplf
2.634 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force Bad Web Bot
🇩🇪 4server
Port Scan Brute-Force Web App Attack
Anonymous
Web App Attack
🇧🇷 Halux
13.48.178.183 Web Application Firewall multiple violations
Hacking Web App Attack
🇧🇪 boxed-it
HEAD /.env.backup (Tarpitted for , wasted 120B)
Web App Attack
🇫🇷 SpaceHost-Server
Brute-Force Web App Attack
🇩🇪 dbmwebdesign
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇳🇱 ams_sec_user
Automated requests against a hosted website: 5 requests between 22:00 and 22:59 UTC; 5 probes for exposed secrets/config files (/.env.prod, /.env.old, /.env.production). Reported automatically.
Hacking Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2026-11-08
Web App Attack SSH Hacking
🇺🇸 Rayulcifer
13.48.178.183 - - [08/Nov/2026:17:51:11 -0500] "HEAD /.env.backup HTTP/1.1" 403 6511 "-" "Mozilla/5.0" ...
Open Proxy Port Scan Hacking Web App Attack SSH
🇬🇧 Smish
HONEYPOT HIT --> Fail2ban time=1794178174 log=2026-11-08T22:49:34+00:00 ip=13.48.178.183 host=as210667.net method=HEAD uri="/.env.backup" status=404 ua="Mozilla/5.0" ref="-" rid=6b5c3bad281ad26f13c6386788642d9b
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 77.239.124.68
🇨🇳 221.15.4.164
🇸🇬 188.166.218.214
🇺🇸 129.121.115.165
🇺🇸 91.230.168.124
🇳🇱 45.148.10.152
🇳🇱 45.148.10.141
🇨🇳 42.192.1.50
🇧🇪 34.140.194.215
🇹🇼 34.81.70.193
🇳🇱 204.76.203.221
🇷🇺 176.109.110.102
🇭🇰 154.92.2.59
🇹🇼 110.25.110.133
🇳🇱 109.160.32.118
🇨🇳 101.89.141.184
🇺🇸 91.230.168.126
🇺🇸 57.141.20.71
🇮🇩 36.95.221.140
🇬🇧 35.203.211.237
feedback