JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 13.59.239.178

13.59.239.178 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	Amazon Technologies Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-13-59-239-178.us-east-2.compute.amazonaws.com
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 13.59.239.178

Whois 13.59.239.178

IP Abuse Reports for 13.59.239.178:

This IP address has been reported a total of 18 times from 15 distinct sources. 13.59.239.178 was first reported on November 6th 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇱 rvalderrama	2022-12-19 09:50:10 (3 years ago)	Reporte abuso de IP \| PHP/Agent.NFA!tr	Brute-Force Exploited Host
🇨🇭 backslash	2022-12-08 03:55:37 (3 years ago)		Bad Web Bot
🇧🇪 Ivo Vynckier	2022-11-18 13:58:13 (3 years ago)	Brute-force PHP/Wordpress attack.	Brute-Force Web App Attack
Anonymous	2022-11-17 14:20:56 (3 years ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/style.php	Web App Attack
🇮🇩 hermawan	2022-11-17 07:55:59 (3 years ago)	[Thu Nov 17 19:55:56.524947 2022] [-:error] [pid 81923:tid 140438892750400] [client 13.59.239.178:49 ... show more [Thu Nov 17 19:55:56.524947 2022] [-:error] [pid 81923:tid 140438892750400] [client 13.59.239.178:49722] [client 13.59.239.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "155"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-includes/css/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0-rc1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Y3YvXFhK3CBYVnXtY1TmtQAAALw"], referer www.bing.com [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[81958] [XnQlHBrcpKk] [Y3YvXFhK3CBYVnXtY1TmtQAAALw] keep_alive=[0 ... show less	Hacking Web App Attack
🇮🇩 hermawan	2022-11-16 14:20:00 (3 years ago)	[Thu Nov 17 02:19:56.644009 2022] [-:error] [pid 73945:tid 139735265572416] [client 13.59.239.178:61 ... show more [Thu Nov 17 02:19:56.644009 2022] [-:error] [pid 73945:tid 139735265572416] [client 13.59.239.178:61748] [client 13.59.239.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "155"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-includes/css/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0-rc1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Y3U33DxKZIflellKO7hYOwAAAAs"], referer www.bing.com [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[73978] [50GJW6vms7w] [Y3U33DxKZIflellKO7hYOwAAAAs] keep_alive=[0 ... show less	Hacking Web App Attack
🇮🇩 Secmon	2022-11-16 07:16:03 (3 years ago)	Attack Web	Hacking Web App Attack
🇮🇩 hermawan	2022-11-16 06:13:56 (3 years ago)	[Wed Nov 16 18:12:42.975865 2022] [-:error] [pid 328087:tid 140196860421696] [client 13.59.239.178:5 ... show more [Wed Nov 16 18:12:42.975865 2022] [-:error] [pid 328087:tid 140196860421696] [client 13.59.239.178:55312] [client 13.59.239.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "155"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /wp-includes/css/wp-config.php"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0-rc1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Y3TFqk2kEtH5yAytYDVIyQAAAB0"], referer www.bing.com [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[328113] [QnghjeQa93s] [Y3TFqk2kEtH5yAytYDVIyQAAAB0] keep_alive= ... show less	Hacking Web App Attack
🇬🇧 Apache	2022-11-12 06:24:53 (3 years ago)	(mod_security) mod_security (id:20000010) triggered by 13.59.239.178 (US/United States/ec2-13-59-239 ... show more (mod_security) mod_security (id:20000010) triggered by 13.59.239.178 (US/United States/ec2-13-59-239-178.us-east-2.compute.amazonaws.com): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 gu-alvareza	2022-11-10 13:15:44 (3 years ago)	WordPress.REST.API.Username.Enumeration.Information.Disclosure	Web App Attack
🇺🇸 SiliSoftware	2022-11-10 09:35:49 (3 years ago)	/wp-content/themes/seotheme/db.php?u	Web App Attack
🇺🇸 TheMadBeaker	2022-11-10 00:25:25 (3 years ago)	Fail2Ban Ban Triggered Wordpress Attack Attempt	Brute-Force Web App Attack
🇪🇸 10dencehispahard SL	2022-11-09 23:39:16 (3 years ago)	Abusive use detected	Brute-Force
🇮🇩 hermawan	2022-11-08 17:25:09 (3 years ago)	[Wed Nov 09 05:25:00.076060 2022] [-:error] [pid 222831:tid 140172540577344] [client 13.59.239.178:5 ... show more [Wed Nov 09 05:25:00.076060 2022] [-:error] [pid 222831:tid 140172540577344] [client 13.59.239.178:51274] [client 13.59.239.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "144"] [id "913101"] [msg "Found User-Agent associated with scripting/generic HTTP client"] [data "Matched Data: python-requests found within REQUEST_HEADERS:User-Agent: python-requests/2.28.1"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0-rc1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scripting"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "Y2rXPORPS2ejXfUO8WMjvwAAADY"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[222857] [nW24Ao1 ... show less	Hacking Web App Attack
🇺🇸 mnsf	2022-11-08 10:04:12 (3 years ago)	Too many Status 40X (21)	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.3

🇸🇦 145.82.111.39

🇧🇬 104.28.60.15

🇮🇩 103.97.101.25

🇳🇱 77.239.124.242

🇺🇸 70.120.203.193

🇫🇷 54.38.180.48

🇬🇧 35.203.211.107

🇰🇷 222.239.251.12

🇩🇪 213.209.159.241

🇦🇿 185.146.113.87

🇮🇹 185.15.171.51

🇧🇴 181.115.171.216

🇺🇸 136.0.105.188

🇳🇬 105.113.16.109

🇺🇸 64.62.156.60

🇮🇹 31.13.138.139

🇷🇴 2.57.121.25

🇳🇱 213.176.26.74

🇧🇩 202.72.236.208