JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 189.26.165.253

189.26.165.253 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 91%: ?

91%

ISP	TELEFÔNICA BRASIL S.A
Usage Type	Fixed Line ISP
ASN	AS18881
Hostname(s)	189.26.165.253.dynamic.adsl.gvt.net.br
Domain Name	telefonica.com.br
Country	🇧🇷 Brazil
City	Maringa, Parana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 189.26.165.253

Whois 189.26.165.253

IP Abuse Reports for 189.26.165.253:

This IP address has been reported a total of 20 times from 17 distinct sources. 189.26.165.253 was first reported on August 20th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 KnightIndustries	2026-08-24 15:49:37 (1 hour ago)	2026-08-24T17:49:16.033270+02:00 milkyway wordpress(fawcettcomputerservices.com)[220834]: XML-RPC au ... show more 2026-08-24T17:49:16.033270+02:00 milkyway wordpress(fawcettcomputerservices.com)[220834]: XML-RPC authentication failure for joshua from 189.26.165.253 2026-08-24T17:49:26.519231+02:00 milkyway wordpress(fawcettcomputerservices.com)[227545]: XML-RPC authentication failure for joshua from 189.26.165.253 2026-08-24T17:49:37.034347+02:00 milkyway wordpress(fawcettcomputerservices.com)[209724]: XML-RPC authentication failure for joshua from 189.26.165.253 ... show less	Brute-Force Web App Attack
Anonymous	2026-08-24 13:09:03 (4 hours ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 cwytech	2026-08-23 19:51:48 (21 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
Anonymous	2026-08-23 15:17:36 (1 day ago)	[redacted] 189.26.165.253 - - [23/Aug/2026:17:16:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 189.26.165.253 - - [23/Aug/2026:17:16:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 189.26.165.253 - - [23/Aug/2026:17:17:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" [redacted] 189.26.165.253 - - [23/Aug/2026:17:17:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 189.26.165.253 - - [23/Aug/2026:17:17:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 189.26.165.253 - - [23/Aug/2026:17:17:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
Anonymous	2026-08-23 10:21:44 (1 day ago)	(wordpress) Failed wordpress login from 189.26.165.253 (BR/Brazil/189.26.165.253.dynamic.adsl.gvt.ne ... show more (wordpress) Failed wordpress login from 189.26.165.253 (BR/Brazil/189.26.165.253.dynamic.adsl.gvt.net.br) show less	Brute-Force
🇳🇱 debestelapp	2026-08-23 01:35:07 (1 day ago)		Web App Attack
Anonymous	2026-08-23 01:15:58 (1 day ago)	[redacted] 189.26.165.253 - - [23/Aug/2026:03:15:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 189.26.165.253 - - [23/Aug/2026:03:15:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" [redacted] 189.26.165.253 - - [23/Aug/2026:03:15:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site38964008.com" [redacted] 189.26.165.253 - - [23/Aug/2026:03:15:37 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 189.26.165.253 - - [23/Aug/2026:03:15:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 189.26.165.253 - - [23/Aug/2026:03:15:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site12827057.com" ... show less	Hacking Web App Attack
🇯🇵 rafale2k	2026-08-22 20:08:20 (1 day ago)	WordPress Brute Force	Brute-Force Web App Attack
🇩🇪 rh24	2026-08-22 17:24:21 (1 day ago)	(wordpress) Failed wordpress login from 189.26.165.253 (BR/Brazil/189.26.165.253.dynamic.adsl.gvt.ne ... show more (wordpress) Failed wordpress login from 189.26.165.253 (BR/Brazil/189.26.165.253.dynamic.adsl.gvt.net.br): (CF_ENABLE) show less	Brute-Force
🇩🇪 Marc	2026-08-22 14:49:28 (2 days ago)	189.26.165.253 - - [22/Aug/2026:16:49:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5350 "-" "WordPress. ... show more 189.26.165.253 - - [22/Aug/2026:16:49:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5350 "-" "WordPress.com; https://wordpress.com" 189.26.165.253 - - [22/Aug/2026:16:49:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5351 "-" "WordPress.com; https://wordpress.com" 189.26.165.253 - - [22/Aug/2026:16:49:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5351 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-22 04:14:25 (2 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC BR/Brazil/189.26.165.253.dynamic.adsl.gvt.net.br	Web App Attack
🇧🇪 madeit	2026-08-21 22:16:25 (2 days ago)		Web App Attack
🇺🇸 WeekendWeb	2026-08-21 21:56:03 (2 days ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 Lee Daniel	2026-08-21 05:41:16 (3 days ago)	[21/Aug/2026:01:40:33.587561 --0400] aofk0ZJ7UUnrKZCiUnrA7AAAAM0 189.26.165.253 51640 127.0.0.1 7081 ... show more [21/Aug/2026:01:40:33.587561 --0400] aofk0ZJ7UUnrKZCiUnrA7AAAAM0 189.26.165.253 51640 127.0.0.1 7081 [21/Aug/2026:01:40:44.094002 --0400] aofk3KB4myUhjUoCYRMlkwAAAVA 189.26.165.253 41680 127.0.0.1 7081 [21/Aug/2026:01:40:54.645565 --0400] aofk5i9kp-j9blUBnHmBUwAAAIY 189.26.165.253 58414 127.0.0.1 7081 [21/Aug/2026:01:41:05.146353 --0400] aofk8S9kp-j9blUBnHmB3wAAAJA 189.26.165.253 41804 127.0.0.1 7081 [21/Aug/2026:01:41:15.625860 --0400] aofk@5J7UUnrKZCiUnrA@AAAANQ 189.26.165.253 35524 127.0.0.1 7081 ... show less	DDoS Attack Brute-Force
Anonymous	2026-08-21 03:06:56 (3 days ago)	[da.kdns.gr] httpd-xmlrpc-post: sites=www.diadromi.com; logs=/var/log/httpd/domains/diadromi.com.log ... show more [da.kdns.gr] httpd-xmlrpc-post: sites=www.diadromi.com; logs=/var/log/httpd/domains/diadromi.com.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:1008:b122:9ac2:49f6:de34:ee80:1ec6

🇺🇸 2607:f8b0:4001:c0b::123

🇪🇬 197.46.232.166

🇷🇺 194.9.232.120

🇺🇸 148.135.144.140

🇨🇳 111.32.153.180

🇨🇳 103.21.141.35

🇺🇸 20.169.49.16

🇷🇴 2.57.122.53

🇻🇳 2402:800:62f8:e2b4:f1aa:dffb:7dd1:719d

🇳🇱 213.165.244.122

🇧🇪 198.235.24.193

🇬🇧 185.192.71.177

🇺🇸 172.245.106.180

🇸🇬 167.71.199.229

🇧🇷 136.248.121.226

🇳🇱 94.154.43.12

🇩🇪 87.106.47.28

🇫🇷 2400:cb00:987:1000:40b8:317a:7e50:2315

🇮🇳 223.188.9.167