JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.48.5.3

13.48.5.3

Neutral Activity

29 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Amazon Data Services Sweden

Usage Type

Data Center/Web Hosting/Transit

ASN

AS16509

Hostname(s)

ec2-13-48-5-3.eu-north-1.compute.amazonaws.com

Domain Name

amazon.com

Country

🇸🇪 Sweden

City

Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.48.5.3 has been reported 29 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 13.48.5.3:

This IP address has been reported a total of 29 times from 25 distinct sources. 13.48.5.3 was first reported on March 1st 2025, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 vfAcceloReporter	2025-10-21 09:47:43 (10 months ago)	13.48.5.3 - - [21/Oct/2025:06:47:41 -0300] "GET /phpinfo.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Win ... show more 13.48.5.3 - - [21/Oct/2025:06:47:41 -0300] "GET /phpinfo.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [21/Oct/2025:06:47:41 -0300] "GET /test1.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [21/Oct/2025:06:47:41 -0300] "GET /testphp.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [21/Oct/2025:06:47:42 -0300] "GET /index.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [21/Oct/2025:06:47:42 -0300] "GET /p.php HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-10-21 09:39:53 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 13.48.5.3 (ec2-13-48-5-3.eu-north-1.compute.ama ... show more (mod_security) mod_security (id:210492) triggered by 13.48.5.3 (ec2-13-48-5-3.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 21 05:39:48.001090 2025] [security2:error] [pid 11629:tid 11629] [client 13.48.5.3:29887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keysenterprise.net"] [uri "/.env.www"] [unique_id "aPdU5Pl9N814AR7TWs1mRQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 COMAITE	2025-10-21 08:03:28 (10 months ago)	Multiple web server 400 error codes from same source ip 13.48.5.3.	Web App Attack
🇫🇷 mrcrassi	2025-10-21 07:22:11 (10 months ago)	Triggered Cloudflare WAF (botFight) from SE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET ... show more Triggered Cloudflare WAF (botFight) from SE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /pinfo.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-10-21 05:33:37 (10 months ago)	HTTPS vulnerability scan attempt detected. Port 443.	Hacking SQL Injection Web App Attack
🇩🇪 london2038.com	2025-10-21 05:28:50 (10 months ago)	Probing for exploits 13.48.5.3 - - [21/Oct/2025:07:28:39 +0200] "GET /p.php HTTP/1.1" 422 0 "-" "Moz ... show more Probing for exploits 13.48.5.3 - - [21/Oct/2025:07:28:39 +0200] "GET /p.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [21/Oct/2025:07:28:43 +0200] "GET /p.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 Gabriel Camargo	2025-10-21 05:20:21 (10 months ago)	13.48.5.3 - - [21/Oct/2025:00:20:20 -0500] "GET /phpinfo.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Win ... show more 13.48.5.3 - - [21/Oct/2025:00:20:20 -0500] "GET /phpinfo.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [21/Oct/2025:00:20:20 -0500] "GET /testphp.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [21/Oct/2025:00:20:21 -0500] "GET /test1.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Brute-Force SSH
🇧🇪 voormedia	2025-10-21 04:37:27 (10 months ago)	Accessed trap at '/phpinfo.php'	Web App Attack
Anonymous	2025-10-21 03:52:02 (10 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇧🇷 vfAcceloReporter	2025-10-21 02:02:35 (10 months ago)	13.48.5.3 - - [20/Oct/2025:23:02:33 -0300] "GET /phpinfo.php HTTP/1.1" 404 123 "-" "Mozilla/5.0 (Win ... show more 13.48.5.3 - - [20/Oct/2025:23:02:33 -0300] "GET /phpinfo.php HTTP/1.1" 404 123 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [20/Oct/2025:23:02:33 -0300] "GET /testphp.php HTTP/1.1" 404 119 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [20/Oct/2025:23:02:34 -0300] "GET /test1.php HTTP/1.1" 404 119 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [20/Oct/2025:23:02:34 -0300] "GET /index.php HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 13.48.5.3 - - [20/Oct/2025:23:02:34 -0300] "GET /p.php HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Brute-Force Exploited Host Web App Attack
Anonymous	2025-10-21 01:41:20 (10 months ago)	Probe attack on .php	Web App Attack
Anonymous	2025-10-21 00:53:02 (10 months ago)	Bot / scanning and/or hacking attempts: GET /phpinfo.php HTTP/1.1, GET /index.php HTTP/1.1, GET /p.p ... show more Bot / scanning and/or hacking attempts: GET /phpinfo.php HTTP/1.1, GET /index.php HTTP/1.1, GET /p.php HTTP/1.1, GET /test1.php HTTP/1.1, GET /php-info.php HTTP/1.1, GET /testphp.php HTTP/1.1 show less	Hacking Web App Attack
🇪🇸 el-brujo	2025-10-20 22:43:29 (10 months ago)	Cloudflare WAF: Request Path: /admin/phpinfo.php Request Query: Host: elhacker.net userAgent: Mozil ... show more Cloudflare WAF: Request Path: /admin/phpinfo.php Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 Action: block Source: firewallManaged ASN Description: AMAZON-02 Country: SE Method: GET Timestamp: 2025-10-20T22:43:29Z ruleId: c2a2f414a67c409f90cccb6c5bba0215. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2025-10-20 22:43:27 (10 months ago)	[Tue Oct 21 00:43:25.677120 2025] [proxy_fcgi:error] [pid 474630:tid 475198] [remote 13.48.5.3:0] AH ... show more [Tue Oct 21 00:43:25.677120 2025] [proxy_fcgi:error] [pid 474630:tid 475198] [remote 13.48.5.3:0] AH01071: Got error 'Primary script unknown\n' [Tue Oct 21 00:43:26.801759 2025] [proxy_fcgi:error] [pid 474634:tid 475506] [remote 13.48.5.3:0] AH01071: Got error 'Primary script unknown\n' ... show less	Hacking Web App Attack
Anonymous	2025-10-20 21:31:00 (10 months ago)	"Undesired, excess traffic against library/education infrastructure"	Brute-Force

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.75.156.89

🇮🇩 210.87.74.107

🇭🇰 192.151.255.195

🇫🇮 147.185.133.247

🇺🇸 104.23.245.83

🇩🇪 94.198.40.124

🇷🇴 80.94.92.55

🇪🇨 45.236.150.66

🇳🇱 45.148.10.141

🇨🇳 43.248.99.142

🇩🇪 43.228.157.10

🇺🇸 43.159.143.139

🇦🇷 181.24.15.174

🇮🇪 168.63.38.237

🇫🇷 85.217.140.28

🇱🇹 62.60.130.201

🇨🇦 20.48.251.3

🇺🇸 12.150.243.22

🇬🇧 154.16.44.46

🇹🇭 147.50.227.79