JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.57.247.214

13.57.247.214 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-57-247-214.us-west-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.57.247.214

Whois 13.57.247.214

IP Abuse Reports for 13.57.247.214:

This IP address has been reported a total of 13 times from 12 distinct sources. 13.57.247.214 was first reported on November 17th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2024-06-11 22:45:00 (2 years ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 Brian Minton	2024-06-11 10:02:48 (2 years ago)	Jun 11 05:02:29 lab sshd[85143]: Connection closed by authenticating user root 13.57.247.214 port 42 ... show more Jun 11 05:02:29 lab sshd[85143]: Connection closed by authenticating user root 13.57.247.214 port 42226 [preauth] Jun 11 05:02:38 lab sshd[85145]: Connection closed by authenticating user root 13.57.247.214 port 54746 [preauth] Jun 11 05:02:47 lab sshd[85147]: Connection closed by authenticating user root 13.57.247.214 port 54752 [preauth] ... show less	Brute-Force SSH
🇬🇧 Bytemark	2024-06-11 03:48:53 (2 years ago)	Jun 11 04:48:12 dlcentre3 sshd[23090]: Failed password for root from 13.57.247.214 port 44964 ssh2	Brute-Force SSH
Anonymous	2024-06-11 01:22:00 (2 years ago)	13.57.247.214 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 13.57.247.214 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 10 20:53:07 server2 sshd[13583]: Failed password for root from 43.133.77.248 port 43204 ssh2 Jun 10 21:21:54 server2 sshd[19480]: Failed password for root from 43.159.146.113 port 54912 ssh2 Jun 10 21:19:38 server2 sshd[19023]: Failed password for root from 143.110.233.255 port 56050 ssh2 Jun 10 21:04:12 server2 sshd[15674]: Failed password for root from 13.57.247.214 port 56904 ssh2 Jun 10 20:54:04 server2 sshd[13869]: Failed password for root from 183.107.159.133 port 40866 ssh2 IP Addresses Blocked: 43.133.77.248 (JP/Japan/-) 43.159.146.113 (JP/Japan/-) 143.110.233.255 (US/United States/-) show less	Brute-Force
🇫🇮 6kilowatti	2024-06-11 00:51:41 (2 years ago)	Jun 11 03:51:39 6kw sshd[306328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 11 03:51:39 6kw sshd[306328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.57.247.214 user=root Jun 11 03:51:41 6kw sshd[306328]: Failed password for root from 13.57.247.214 port 43004 ssh2 ... show less	Brute-Force SSH
🇬🇧 SameTeem	2024-06-10 20:02:40 (2 years ago)	(sshd) Failed SSH login from 13.57.247.214 (US/United States/ec2-13-57-247-214.us-west-1.compute.ama ... show more (sshd) Failed SSH login from 13.57.247.214 (US/United States/ec2-13-57-247-214.us-west-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2024-06-10T20:01:13.073968+00:00 crumpet sshd[469119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.57.247.214 user=root 2024-06-10T20:01:14.803582+00:00 crumpet sshd[469119]: Failed password for root from 13.57.247.214 port 36114 ssh2 2024-06-10T20:01:50.355553+00:00 crumpet sshd[469291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.57.247.214 user=root 2024-06-10T20:01:51.828981+00:00 crumpet sshd[469291]: Failed password for root from 13.57.247.214 port 49868 ssh2 2024-06-10T20:02:34.665167+00:00 crumpet sshd[469308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.57.247.214 user=root show less	Port Scan Brute-Force
🇨🇿 lp	2024-06-10 19:50:38 (2 years ago)	SSH Brute force: 26 attempts were recorded from 13.57.247.214 2024-06-10T20:31:59+02:00 Connection c ... show more SSH Brute force: 26 attempts were recorded from 13.57.247.214 2024-06-10T20:31:59+02:00 Connection closed by authenticating user root 13.57.247.214 port 38078 [preauth] 2024-06-10T20:31:59+02:00 Connection closed by authenticating user root 13.57.247.214 port 38086 [preauth] 2024-06-10T20:32:00+02:00 Connection closed by authenticating user root 13.57.247.214 port 38096 [preauth] 2024-06-10T20:32:01+02:00 Connection closed by authenticating user root 13.57.247.214 port 48200 [preauth] 2024-06-10T20:32:02+02:00 Connection closed by authenticating user root 13.57.247.214 port 48206 [preauth] 2024-06-10T20:32:03+02:00 Connection closed by authenticating user root 13.57.247.214 port 48214 [preauth] 2024-06-10T20:32:04+02:00 Connection closed by authenticating user root 13.57.247.214 port 48226 [preauth] 2024-06-10T20:32:05+02:00 Connection closed by authenticating user root 13.57.247.214 por show less	Brute-Force SSH
🇺🇸 PeravixGroup	2024-06-10 18:50:59 (2 years ago)	2024-06-10T18:50:56.929208 Abus sshd[273382]: pam_unix(sshd:auth): authentication failure; logname= ... show more 2024-06-10T18:50:56.929208 Abus sshd[273382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.57.247.214 user=root 2024-06-10T18:50:58.735484 Abus sshd[273382]: Failed password for root from 13.57.247.214 port 54450 ssh2 ... show less	Brute-Force SSH
🇫🇮 vereinshosting	2024-06-10 18:49:06 (2 years ago)	Invalid user user from 13.57.247.214 port 53124	Brute-Force SSH
Anonymous	2024-06-10 18:34:04 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 www.hazi.ro	2024-06-10 18:21:05 (2 years ago)	[2024-06-10 18:21:05] SSH Bruteforce Attack	Brute-Force SSH
🇺🇸 TPI-Abuse	2023-11-17 14:06:32 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 13.57.247.214 (ec2-13-57-247-214.us-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 13.57.247.214 (ec2-13-57-247-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 17 09:06:28.551768 2023] [security2:error] [pid 12240:tid 47826284988160] [client 13.57.247.214:45920] [client 13.57.247.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idealcentralvac.com"] [uri "/wp-config.php"] [unique_id "ZVdzZPycKkerl1qPyFYyBwAAAUQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-17 11:23:43 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 13.57.247.214 (ec2-13-57-247-214.us-west-1.comp ... show more (mod_security) mod_security (id:210492) triggered by 13.57.247.214 (ec2-13-57-247-214.us-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 17 06:23:37.688902 2023] [security2:error] [pid 29203] [client 13.57.247.214:40594] [client 13.57.247.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.zombiepanic.org"] [uri "/.env"] [unique_id "ZVdNOQxQcyq-7sO0HjwquAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.132.162

🇺🇸 152.32.150.7

🇫🇮 147.185.133.12

🇺🇸 143.42.0.20

🇫🇷 91.231.89.119

🇨🇦 85.217.149.57

🇺🇸 45.79.207.111

🇯🇵 8.216.8.168

🇬🇧 206.189.19.232

🇳🇱 195.178.110.227

🇳🇱 195.178.110.217

🇺🇸 43.130.9.111

🇻🇳 27.79.47.240

🇺🇸 20.65.193.94

🇷🇺 188.0.169.98

🇧🇷 177.30.64.65

🇺🇸 173.255.223.62

🇫🇮 147.185.133.224

🇺🇸 144.24.6.157

🇺🇸 143.42.1.213