JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.56.130.65

Neutral Activity

Abuse confidence score ?

0% Low Risk

25 reports

16 reporters · latest 5 years ago

ISP	OVH Hosting, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-89bca486.vps.ovh.ca
Domain Name	ovh.net
Country	🇨🇦 Canada
City	Beauharnois, Quebec

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

149.56.130.65 has been reported 25 times. The most recent report is from 5 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 149.56.130.65

Export CSV

This IP address has been reported a total of 25 times from 16 distinct sources. 149.56.130.65 was first reported on February 23rd 2021, and the most recent report was 5 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bsoft.de	2021-02-26 16:38:42 (5 years ago)	149.56.130.65 - - [26/Feb/2021:22:38:36 +0100] "GET /wp-login.php HTTP/1.1" 200 8916 "-" "Mozilla/5. ... show more 149.56.130.65 - - [26/Feb/2021:22:38:36 +0100] "GET /wp-login.php HTTP/1.1" 200 8916 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [26/Feb/2021:22:38:40 +0100] "POST /wp-login.php HTTP/1.1" 200 9146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [26/Feb/2021:22:38:41 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇫🇷 security.rdmc.fr	2021-02-26 08:53:51 (5 years ago)	Automatic report - Banned IP Access	Web App Attack
🇭🇺 radicsferi.com	2021-02-26 07:46:32 (5 years ago)	Unauthorized wp-admin login attempts	Web App Attack
🇬🇧 sdos.es	2021-02-26 07:01:38 (5 years ago)	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version ... show more "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:<?xml version: <?xml version" show less	Web App Attack
🇧🇪 taivas.nl	2021-02-26 05:02:07 (5 years ago)	Wordpress_xmlrpc_attack	Bad Web Bot
🇬🇧 Bytemark	2021-02-26 03:48:35 (5 years ago)	149.56.130.65 - - [26/Feb/2021:08:48:33 +0000] "GET /wp-login.php HTTP/1.1" 200 2106 "-" "Mozilla/5. ... show more 149.56.130.65 - - [26/Feb/2021:08:48:33 +0000] "GET /wp-login.php HTTP/1.1" 200 2106 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [26/Feb/2021:08:48:33 +0000] "POST /wp-login.php HTTP/1.1" 200 2196 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [26/Feb/2021:08:48:34 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Brute-Force Web App Attack
🇳🇱 computerdoc	2021-02-25 17:30:08 (5 years ago)	xmlrpc attack	DDoS Attack Web App Attack
🇮🇩 RasyiidWho	2021-02-25 12:36:18 (5 years ago)	ip112.20 . 149.56.130.65 - - [26/Feb/2021:00:36:18 +0700] "POST /xmlrpc.php HTTP/1.1" 401 172 "-" "M ... show more ip112.20 . 149.56.130.65 - - [26/Feb/2021:00:36:18 +0700] "POST /xmlrpc.php HTTP/1.1" 401 172 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇫🇷 security.rdmc.fr	2021-02-25 04:57:49 (5 years ago)	Automatic report - Banned IP Access	Web App Attack
🇨🇦 Spidrweb.co.uk	2021-02-25 03:56:31 (5 years ago)	149.56.130.65 - - [25/Feb/2021:03:44:53 -0500] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 ... show more 149.56.130.65 - - [25/Feb/2021:03:44:53 -0500] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [25/Feb/2021:03:56:30 -0500] "POST /wp-login.php HTTP/1.1" 200 1935 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [25/Feb/2021:03:56:30 -0500] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force
🇩🇪 bsoft.de	2021-02-25 02:03:39 (5 years ago)	149.56.130.65 - - [25/Feb/2021:08:03:35 +0100] "GET /wp-login.php HTTP/1.1" 200 8980 "-" "Mozilla/5. ... show more 149.56.130.65 - - [25/Feb/2021:08:03:35 +0100] "GET /wp-login.php HTTP/1.1" 200 8980 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [25/Feb/2021:08:03:37 +0100] "POST /wp-login.php HTTP/1.1" 200 9231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [25/Feb/2021:08:03:38 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇩🇪 bsoft.de	2021-02-24 20:39:41 (5 years ago)	149.56.130.65 - - [25/Feb/2021:02:39:36 +0100] "GET /wp-login.php HTTP/1.1" 200 8980 "-" "Mozilla/5. ... show more 149.56.130.65 - - [25/Feb/2021:02:39:36 +0100] "GET /wp-login.php HTTP/1.1" 200 8980 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [25/Feb/2021:02:39:39 +0100] "POST /wp-login.php HTTP/1.1" 200 9231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [25/Feb/2021:02:39:40 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇩🇪 Ba-Yu	2021-02-24 17:54:15 (5 years ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇩🇪 bsoft.de	2021-02-24 16:25:08 (5 years ago)	149.56.130.65 - - [24/Feb/2021:22:25:02 +0100] "GET /wp-login.php HTTP/1.1" 200 8980 "-" "Mozilla/5. ... show more 149.56.130.65 - - [24/Feb/2021:22:25:02 +0100] "GET /wp-login.php HTTP/1.1" 200 8980 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [24/Feb/2021:22:25:05 +0100] "POST /wp-login.php HTTP/1.1" 200 9231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [24/Feb/2021:22:25:06 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack
🇩🇪 bsoft.de	2021-02-24 14:23:40 (5 years ago)	149.56.130.65 - - [24/Feb/2021:20:23:36 +0100] "GET /wp-login.php HTTP/1.1" 200 8980 "-" "Mozilla/5. ... show more 149.56.130.65 - - [24/Feb/2021:20:23:36 +0100] "GET /wp-login.php HTTP/1.1" 200 8980 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [24/Feb/2021:20:23:37 +0100] "POST /wp-login.php HTTP/1.1" 200 9231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 149.56.130.65 - - [24/Feb/2021:20:23:39 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 209.38.45.26

🇺🇦 194.146.189.100

🇧🇷 189.84.251.120

🇰🇷 118.37.214.187

🇫🇮 45.154.244.170

🇺🇸 20.46.235.237

🇺🇸 17.166.234.149

🇺🇸 17.166.154.43

🇻🇳 14.244.58.31

🇯🇵 8.211.169.222

🇧🇷 189.60.96.145

🇧🇷 187.6.56.226

🇩🇪 167.94.145.24

🇺🇸 158.51.96.38

🇻🇳 113.169.54.165

🇷🇴 92.118.39.14

🇩🇪 69.5.169.65

🇺🇸 66.132.224.240

🇺🇸 64.225.63.62

🇺🇸 64.62.197.21