80.121.14.158
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- A1 Telekom Austria AG
- Usage Type
- Fixed Line ISP
- ASN
- AS8447
- Domain Name
- a1.net
- Country
- 🇦🇹 Austria
- City
- Linz, Upper Austria
Abuse Reports
Total reports
27 from
22 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇴 jad-abuse |
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 1 hits.
|
Brute-Force Web App Attack | |
| Anonymous |
WordPress login / xmlrpc probing across multiple sites
|
Web App Attack | |
| 🇺🇸 raymarron.com |
POST /xmlrpc.php
|
Web App Attack | |
| 🇺🇸 raymarron.com |
POST /xmlrpc.php
|
Web App Attack | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-xmlrpc-bf-high.
|
Bad Web Bot Web App Attack | |
| 🇳🇱 debestelapp |
|
Web App Attack | |
| Anonymous |
Reported by internal abuse tracking
|
DDoS Attack Web App Attack | |
| 🇷🇺 OK |
HTTP/HTTPS
|
Hacking Web App Attack | |
| 🇩🇪 stinpriza |
Web App Attack
|
Web App Attack | |
| 🇺🇸 WellSpring |
xmlrpc exploit on wellspr.ing/xmlrpc.php — WellSpr.ing/NetSentinel civic-AI security layer
|
Brute-Force Web App Attack | |
| 🇨🇭 4server |
|
Hacking Web App Attack | |
| 🇩🇪 Hazzard |
(wordpress) Failed wordpress login from 80.121.14.158 (AT/Austria/Upper Austria/Linz/80-121-14-158.adsl.highway.telekom.at/[redacted]): (CF_ENABLE)
|
Brute-Force | |
| 🇩🇪 LRob |
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/83.0.0.0 Safari/537.36 | 2026-10-13 18:51 UTC
|
Web App Attack Hacking | |
| 🇲🇹 Malta |
80.121.14.158 - - [13/Oct/2026:18:50:55 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.0.0 Safari/537.36"
|
Hacking Web App Attack | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown