JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

13.68.189.248

Neutral Activity

Abuse confidence score ?

0% Low Risk

2,644 reports

481 reporters · latest 2 years ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Dulles Town Center, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.68.189.248 has been reported 2,644 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 13.68.189.248

Export CSV

This IP address has been reported a total of 2,644 times from 481 distinct sources. 13.68.189.248 was first reported on April 12th 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2023-11-30 00:10:09 (2 years ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 psauxit	2023-05-30 21:18:45 (3 years ago)	Fail2Ban - SSHD brute-force SSH server	SSH
🇺🇸 mhhdr	2023-05-11 10:38:17 (3 years ago)	SSH Brute-force. Last login: root.	Brute-Force SSH
Anonymous	2023-05-11 06:23:27 (3 years ago)	2023-05-11T06:19:32.642339front2.int sshd[23389]: Invalid user m1 from 13.68.189.248 port 46648 2023 ... show more 2023-05-11T06:19:32.642339front2.int sshd[23389]: Invalid user m1 from 13.68.189.248 port 46648 2023-05-11T06:19:32.656535front2.int sshd[23389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.189.248 2023-05-11T06:19:34.998130front2.int sshd[23389]: Failed password for invalid user m1 from 13.68.189.248 port 46648 ssh2 2023-05-11T06:23:23.474909front2.int sshd[49474]: Invalid user nicola from 13.68.189.248 port 60512 ... show less	Brute-Force SSH
🇮🇩 asrarakhair	2023-05-11 03:47:30 (3 years ago)	(sshd) Failed SSH login from 13.68.189.248 (US/-/-): 5 in the last 3600 secs; Ports: ; Direction: 1 ... show more (sshd) Failed SSH login from 13.68.189.248 (US/-/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 11 11:41:50 localhost sshd[251017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.189.248 user=root May 11 11:41:52 localhost sshd[251017]: Failed password for root from 13.68.189.248 port 33984 ssh2 May 11 11:47:23 localhost sshd[252824]: Invalid user wallet from 13.68.189.248 port 42430 May 11 11:47:23 localhost sshd[252824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.189.248 May 11 11:47:25 localhost sshd[252824]: Failed password for invalid user wallet from 13.68.189.248 port 42430 ssh2 show less	Brute-Force SSH
🇳🇱 bitosis	2023-05-11 01:11:18 (3 years ago)	May 11 03:08:10 jumphost sshd[241076]: Invalid user student from 13.68.189.248 port 45084 May 11 03: ... show more May 11 03:08:10 jumphost sshd[241076]: Invalid user student from 13.68.189.248 port 45084 May 11 03:11:03 jumphost sshd[241194]: Invalid user cha from 13.68.189.248 port 48012 May 11 03:11:17 jumphost sshd[241206]: User root from 13.68.189.248 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇫🇷 someone	2023-05-10 20:55:38 (3 years ago)	SSH brute force attack detected from [13.68.189.248]	Brute-Force SSH
🇺🇸 TheMadBeaker	2023-05-10 13:08:40 (3 years ago)	Fail2Ban - SSH Bruteforce Attempt	Brute-Force SSH
Anonymous	2023-05-10 11:28:32 (3 years ago)	May 10 20:28:29 tom sshd[6401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more May 10 20:28:29 tom sshd[6401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.189.248 May 10 20:28:31 tom sshd[6401]: Failed password for invalid user xupeng from 13.68.189.248 port 53448 ssh2 show less	Brute-Force SSH
🇩🇪 ps-center	2023-05-10 03:32:31 (3 years ago)	SS1: Brutforce ssh Login	Brute-Force
🇨🇦 Lagserv.com	2023-05-09 23:02:08 (3 years ago)	SSH Brute-Force	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-05-09 23:01:27 (3 years ago)	ThreatBook Intelligence: IDC,Brute Force more details on https://threatbook.io/ip/13.68.189.248	Brute-Force
🇺🇸 Peregrine	2023-05-09 19:09:30 (3 years ago)	May 9 16:09:00 node1 sshd[23186]: Invalid user sgp from 13.68.189.248 port 45154 May 9 16:09:30 no ... show more May 9 16:09:00 node1 sshd[23186]: Invalid user sgp from 13.68.189.248 port 45154 May 9 16:09:30 node1 sshd[23578]: Invalid user admin123 from 13.68.189.248 port 44840 ... show less	Brute-Force SSH
🇩🇪 choseh	2023-05-09 14:28:03 (3 years ago)	May 9 16:27:36 cho sshd[2420889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more May 9 16:27:36 cho sshd[2420889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.189.248 May 9 16:27:37 cho sshd[2420889]: Failed password for invalid user satya from 13.68.189.248 port 44880 ssh2 May 9 16:27:49 cho sshd[2420904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.189.248 user=root May 9 16:27:51 cho sshd[2420904]: Failed password for root from 13.68.189.248 port 37436 ssh2 May 9 16:28:03 cho sshd[2420909]: Invalid user cactiuser from 13.68.189.248 port 58068 ... show less	Brute-Force SSH
🇩🇪 georgengelmann	2023-05-09 13:29:14 (3 years ago)	May 9 15:22:13 electroncash sshd[22486]: Failed password for invalid user Guest from 13.68.189.248 ... show more May 9 15:22:13 electroncash sshd[22486]: Failed password for invalid user Guest from 13.68.189.248 port 45402 ssh2 May 9 15:28:58 electroncash sshd[26908]: Invalid user sdbadmin from 13.68.189.248 port 41586 May 9 15:28:58 electroncash sshd[26908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.68.189.248 May 9 15:29:00 electroncash sshd[26908]: Failed password for invalid user sdbadmin from 13.68.189.248 port 41586 ssh2 May 9 15:29:13 electroncash sshd[27083]: Invalid user janice from 13.68.189.248 port 54104 ... show less	Brute-Force SSH

Showing 1 to 15 of 2644 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.133

🇺🇸 35.153.184.216

🇺🇸 20.65.217.174

🇰🇷 218.146.81.169

🇬🇧 200.138.46.254

🇺🇸 199.165.159.25

🇺🇸 129.121.136.31

🇬🇧 109.169.10.4

🇮🇳 106.51.72.246

🇺🇸 71.6.232.20

🇧🇷 201.63.223.138

🇲🇽 187.174.238.116

🇲🇼 105.234.156.197

🇸🇮 102.220.160.29

🇯🇵 43.167.239.66

🇬🇧 35.203.211.217

🇰🇷 1.227.228.131

🇬🇧 200.138.46.196

🇳🇱 195.178.110.53

🇨🇳 121.10.215.142