JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

13.245.156.167

Neutral Activity

Abuse confidence score ?

0% Low Risk

27 reports

17 reporters · latest 4 years ago

ISP	Amazon Data Services South Africa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-245-156-167.af-south-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

13.245.156.167 has been reported 27 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 13.245.156.167

This IP address has been reported a total of 27 times from 17 distinct sources. 13.245.156.167 was first reported on March 8th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ba-Yu	2022-04-07 18:00:12 (4 years ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇨🇿 plzenskypruvodce.cz	2022-03-13 17:10:41 (4 years ago)	Mar 13 22:10:38 mail wordpress(gpfans.cz)[2493711]: Authentication attempt for unknown user [login] ... show more Mar 13 22:10:38 mail wordpress(gpfans.cz)[2493711]: Authentication attempt for unknown user [login] from 13.245.156.167 ... show less	Brute-Force
🇸🇬 pusathosting.com	2022-03-13 09:10:04 (4 years ago)	can 13.245.156.167 [13/Mar/2022:18:27:44 "-" "POST /wp-login.php 200 4683 13.245.156.167 [13/Mar/202 ... show more can 13.245.156.167 [13/Mar/2022:18:27:44 "-" "POST /wp-login.php 200 4683 13.245.156.167 [13/Mar/2022:20:05:08 "-" "GET /wp-login.php 200 4682 13.245.156.167 [13/Mar/2022:20:05:10 "-" "POST /wp-login.php 200 4682 show less	Brute-Force Web App Attack
🇨🇿 plzenskypruvodce.cz	2022-03-13 05:14:46 (4 years ago)	[Sun Mar 13 10:10:14.054393 2022] [access_compat:error] [pid 2349272:tid 139662874048256] [client 13 ... show more [Sun Mar 13 10:10:14.054393 2022] [access_compat:error] [pid 2349272:tid 139662874048256] [client 13.245.156.167:50890] AH01797: client denied by server configuration: /var/www/lubosluka.com/www/xmlrpc.php [Sun Mar 13 10:14:44.879079 2022] [access_compat:error] [pid 2355424:tid 139662832084736] [client 13.245.156.167:33924] AH01797: client denied by server configuration: /var/www/gpfans.cz/www/xmlrpc.php ... show less	Web App Attack
🇩🇪 cmanivong	2022-03-12 23:24:19 (4 years ago)	13.245.156.167 - - [12/Mar/2022:23:11:17 +0100] "POST /wp-login.php HTTP/1.0" 200 3845 "-" "Mozilla/ ... show more 13.245.156.167 - - [12/Mar/2022:23:11:17 +0100] "POST /wp-login.php HTTP/1.0" 200 3845 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 13.245.156.167 - - [13/Mar/2022:00:51:08 +0100] "POST /wp-login.php HTTP/1.0" 200 3845 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 13.245.156.167 - - [13/Mar/2022:03:06:02 +0100] "POST /wp-login.php HTTP/1.0" 200 3845 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 13.245.156.167 - - [13/Mar/2022:04:25:03 +0100] "POST /wp-login.php HTTP/1.0" 200 3845 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 13.245.156.167 - - [13/Mar/2022:05:24:18 +0100] "POST /wp-login.php HTTP/1.0" 200 3845 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack
🇲🇾 syokadmin	2022-03-12 14:52:50 (4 years ago)	(PERMBLOCK) 13.245.156.167 (ZA/South Africa/ec2-13-245-156-167.af-south-1.compute.amazonaws.com) has ... show more (PERMBLOCK) 13.245.156.167 (ZA/South Africa/ec2-13-245-156-167.af-south-1.compute.amazonaws.com) has had more than 2 temp blocks in the last 86400 secs show less	Brute-Force
🇲🇾 syokadmin	2022-03-12 14:12:12 (4 years ago)	(mod_security) mod_security (id:942100) triggered by 13.245.156.167 (ZA/South Africa/ec2-13-245-156- ... show more (mod_security) mod_security (id:942100) triggered by 13.245.156.167 (ZA/South Africa/ec2-13-245-156-167.af-south-1.compute.amazonaws.com): 1 in the last 3600 secs show less	Brute-Force
🇲🇾 syokadmin	2022-03-12 07:41:47 (4 years ago)	(mod_security) mod_security (id:240335) triggered by 13.245.156.167 (ZA/South Africa/ec2-13-245-156- ... show more (mod_security) mod_security (id:240335) triggered by 13.245.156.167 (ZA/South Africa/ec2-13-245-156-167.af-south-1.compute.amazonaws.com): 1 in the last 3600 secs show less	Brute-Force
🇻🇳 websase.com	2022-03-12 07:37:54 (4 years ago)	WordPress XMLRPC Brute Force Attacks	Brute-Force Web App Attack
🇸🇬 pusathosting.com	2022-03-12 05:15:19 (4 years ago)	ang 13.245.156.167 {smpn19padang.sch.id} "POST /xmlrpc.php 200 13.245.156.167 {dnddesign-studio.com} ... show more ang 13.245.156.167 {smpn19padang.sch.id} "POST /xmlrpc.php 200 13.245.156.167 {dnddesign-studio.com} "POST /xmlrpc.php 200 13.245.156.167 {polbangtan-gowa.ac.id} "POST /xmlrpc.php 200 show less	Brute-Force Web App Attack
🇩🇪 emha.koeln	2022-03-12 00:09:50 (4 years ago)	v2202006123119120844 13.245.156.167 - - [11/Mar/2022:17:49:52 +0100] "POST /wp-login.php HTTP/1.1" 2 ... show more v2202006123119120844 13.245.156.167 - - [11/Mar/2022:17:49:52 +0100] "POST /wp-login.php HTTP/1.1" 200 9006 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" v2202006123119120844 13.245.156.167 - - [11/Mar/2022:17:49:53 +0100] "POST /xmlrpc.php HTTP/1.1" 200 404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" v2202006123119120844 13.245.156.167 - - [12/Mar/2022:06:09:48 +0100] "POST /wp-login.php HTTP/1.1" 200 9006 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Brute-Force Web App Attack
🇺🇸 rsiddall	2022-03-11 20:23:36 (4 years ago)	13.245.156.167 - - [11/Mar/2022:20:15:54 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5. ... show more 13.245.156.167 - - [11/Mar/2022:20:15:54 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 13.245.156.167 - - [11/Mar/2022:20:23:35 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force
Anonymous	2022-03-11 13:23:26 (4 years ago)	www.geburtshaus-fulda.de 13.245.156.167 [09/Mar/2022:11:21:37 +0100] "POST /wp-login.php HTTP/1.1" 2 ... show more www.geburtshaus-fulda.de 13.245.156.167 [09/Mar/2022:11:21:37 +0100] "POST /wp-login.php HTTP/1.1" 200 8250 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 13.245.156.167 [09/Mar/2022:11:21:38 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇨🇦 KIsmay	2022-03-11 06:22:41 (4 years ago)	WordPress Brute Force, 5 attempts	Brute-Force Web App Attack
🇩🇪 clamehost.it	2022-03-11 03:03:06 (4 years ago)	Automatic report - Brute Force attack using this IP address	Brute-Force

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 219.140.138.90

🇺🇸 147.185.132.249

🇹🇼 111.70.23.253

🇺🇸 68.225.62.76

🇯🇵 34.84.4.55

🇧🇪 34.52.132.0

🇧🇪 34.22.212.140

🇰🇿 2.76.163.205

🇮🇩 210.87.92.196

🇨🇱 200.54.228.34

🇧🇷 186.65.79.41

🇦🇷 186.57.147.133

🇳🇱 185.226.197.67

🇺🇸 185.223.152.212

🇰🇷 175.45.204.121

🇨🇳 171.104.83.190

🇺🇸 162.216.149.87

🇵🇭 138.84.101.99

🇩🇪 135.125.235.107

🇬🇧 45.133.173.47