41.79.212.13
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- FIRSTNET TECHNOLOGY SERVICES (PTY) LTD
- Usage Type
- Fixed Line ISP
- ASN
- AS328366
- Domain Name
- firstnet.co.za
- Country
- 🇿🇦 South Africa
- City
- Durban, KwaZulu-Natal
Abuse Reports
Total reports
607 from
176 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 IVski.com |
IVski WAF | WordPress scanner detected - probing wp-content, xmlrpc or wp-login
|
Hacking Brute-Force Web App Attack | |
| 🇹🇷 oalver |
|
Web App Attack | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| 🇩🇪 neogenius |
Web App Attack
|
Web App Attack Brute-Force | |
| 🇩🇪 london2038.com |
|
Brute-Force Web App Attack | |
| 🇫🇷 Yepngo |
41.79.212.13 - - [17/Oct/2026:02:42:26 +0200] "POST /wp-login.php HTTP/2.0" 200 12513 "https://www.yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
|
Brute-Force Web App Attack | |
| 🇩🇪 IVski.com |
IVski WAF | Router admin login probe
|
Hacking Brute-Force Web App Attack | |
| 🇹🇷 oalver |
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 503). First seen: 2026-10-16. Risk score: 30/100.
|
Web App Attack | |
| 🇩🇪 neckaralb-admin.de |
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇬🇧 BRHosting |
Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)
|
Brute-Force Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
|
Exploited Host Web App Attack | |
| 🇩🇰 Juha Jurvanen |
Scantide Guard for WordPress locally blocked a request. Rule family: path_traversal. Reference: ST-20261016-223447-f090f61d24.
|
Web App Attack | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
|
Hacking | |
| 🇫🇷 tecnicorioja |
wp-login attack [16/Oct/2026:06:13:32
|
Brute-Force Web App Attack | |
| Anonymous |
Web probing (1 hits in 24h) on limburgsekunstkring.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown