AbuseIPDB » 189.126.217.80
189.126.217.80
This IP was reported 10 times. Confidence of
Abuse
is 45% : ?
ISP
NOVACIA TECNOLOGIA E TELECOMUNICACOES LTDA
Usage Type
Fixed Line ISP
ASN
AS28227
Hostname(s)
189-126-217-80.onitel.com.br
Domain Name
onitel.com.br
Country
🇧🇷
Brazil
City
Brasilia, Federal District
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 189.126.217.80 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
189.126.217.80 was first reported on
July 16th 2026 , and the most recent report was
14 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
IndigoRidge
2026-07-23 12:41:40
(14 hours ago)
189.126.217.80 - - [23/Jul/2026:08:39:39 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5049 "-" "WordPress. ...
show more
189.126.217.80 - - [23/Jul/2026:08:39:39 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5049 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [23/Jul/2026:08:40:44 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5049 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [23/Jul/2026:08:41:17 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5049 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [23/Jul/2026:08:41:28 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5049 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [23/Jul/2026:08:41:39 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5049 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
2026-07-22 21:09:02
(1 day ago)
[osotir.org] httpd-xmlrpc-post: sites=www.drasimas.gr; logs=/var/log/httpd/domains/drasimas.gr.log; ...
show more
[osotir.org] httpd-xmlrpc-post: sites=www.drasimas.gr; logs=/var/log/httpd/domains/drasimas.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-07-21 17:06:37
(2 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
BR/Brazil/189-126-217-80.onitel.com.br
Web App Attack
🇩🇪
konseptit
2026-07-21 11:51:07
(2 days ago)
(wordpress) Failed wordpress login from 189.126.217.80 (BR/Brazil/189-126-217-80.onitel.com.br)
Brute-Force
🇺🇸
IndigoRidge
2026-07-20 18:39:56
(3 days ago)
189.126.217.80 - - [20/Jul/2026:14:39:00 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress. ...
show more
189.126.217.80 - - [20/Jul/2026:14:39:00 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [20/Jul/2026:14:39:10 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [20/Jul/2026:14:39:21 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [20/Jul/2026:14:39:43 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [20/Jul/2026:14:39:54 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
2026-07-20 14:36:59
(3 days ago)
[redacted] 189.126.217.80 - - [20/Jul/2026:16:35:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 189.126.217.80 - - [20/Jul/2026:16:35:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site30431913.com"
[redacted] 189.126.217.80 - - [20/Jul/2026:16:36:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site86732906.com"
[redacted] 189.126.217.80 - - [20/Jul/2026:16:36:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)"
[redacted] 189.126.217.80 - - [20/Jul/2026:16:36:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 189.126.217.80 - - [20/Jul/2026:16:36:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)"
...
show less
Hacking
Web App Attack
2026-07-17 19:30:26
(6 days ago)
[redacted] 189.126.217.80 - - [17/Jul/2026:21:29:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" " ...
show more
[redacted] 189.126.217.80 - - [17/Jul/2026:21:29:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
[redacted] 189.126.217.80 - - [17/Jul/2026:21:29:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 189.126.217.80 - - [17/Jul/2026:21:29:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 189.126.217.80 - - [17/Jul/2026:21:29:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/13.0; WordPress/6.2; http://site98303362.com"
[redacted] 189.126.217.80 - - [17/Jul/2026:21:29:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/13.0; WordPress/6.4; http://site56026565.com"
[redacted] 189.126.217.80 - - [17/Jul/2026:21:30:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 189.126.217.80 - - [17/Jul/2026:21:30:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
bbk
...
show less
Hacking
Web App Attack
🇺🇸
IndigoRidge
2026-07-17 16:55:13
(6 days ago)
189.126.217.80 - - [17/Jul/2026:12:52:59 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress. ...
show more
189.126.217.80 - - [17/Jul/2026:12:52:59 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [17/Jul/2026:12:53:55 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [17/Jul/2026:12:54:17 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [17/Jul/2026:12:55:01 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com"
189.126.217.80 - - [17/Jul/2026:12:55:12 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5103 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
🇩🇪
akasolutions.de
2026-07-17 12:29:37
(6 days ago)
(wordpress) Failed wordpress login from 189.126.217.80 (BR/Brazil/189-126-217-80.onitel.com.br)
Brute-Force
🇫🇷
dynamix
2026-07-16 20:26:14
(1 week ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: