This IP address has been reported a total of
9
times from
9 distinct
sources.
189.39.138.122 was first reported on
October 1st 2026 , and the most recent report was
3 days ago .
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Canada
with 2
reports;
France
with 1
report.
The most common categories in these recent reports were:
Web App Attack
8
times;
Brute-Force
5
times;
DDoS Attack
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
π«π·
dynamix
2026-10-14 17:03:01
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
π¨π¦
Dunham Support
2026-10-14 15:01:08
(3 days ago)
(wordpress) Failed wordpress login from 189.39.138.122 (BR/Brazil/-)
Brute-Force
π©πͺ
LRob
2026-10-14 14:30:18
(3 days ago)
WordPress login brute force | path: /xmlrpc.php | ua: WordPress.com; https://wordpress.com, Jetpack/ ...
show more
WordPress login brute force | path: /xmlrpc.php | ua: WordPress.com; https://wordpress.com, Jetpack/12.0; WordPress/6.4; http://site43249428.com, Jetpack/12.1; WordPress/6.1; http://site56369169.com (+1 more)
show less
Brute-Force
Web App Attack
π³π±
ConsulHosting
2026-10-14 11:32:06
(4 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
πΊπΈ
IndigoRidge
2026-10-14 10:04:36
(4 days ago)
189.39.138.122 - - [14/Oct/2026:06:02:49 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5882 "-" "WordPress. ...
show more
189.39.138.122 - - [14/Oct/2026:06:02:49 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5882 "-" "WordPress.com; https://wordpress.com"
189.39.138.122 - - [14/Oct/2026:06:03:10 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5866 "-" "WordPress.com; https://wordpress.com"
189.39.138.122 - - [14/Oct/2026:06:03:21 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5882 "-" "WordPress.com; https://wordpress.com"
189.39.138.122 - - [14/Oct/2026:06:03:52 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5882 "-" "WordPress.com; https://wordpress.com"
189.39.138.122 - - [14/Oct/2026:06:04:34 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5882 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
Anonymous
2026-10-13 23:34:19
(4 days ago)
[redacted] 189.39.138.122 - - [14/Oct/2026:01:33:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 189.39.138.122 - - [14/Oct/2026:01:33:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 189.39.138.122 - - [14/Oct/2026:01:33:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)"
[redacted] 189.39.138.122 - - [14/Oct/2026:01:33:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)"
[redacted] 189.39.138.122 - - [14/Oct/2026:01:34:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 189.39.138.122 - - [14/Oct/2026:01:34:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
Anonymous
2026-10-13 16:05:36
(4 days ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
π²πΎ
Rizzy
2026-10-01 21:31:12
(2 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-10-01 19:00:34
(2 weeks ago)
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=www.bamhairsalon.gr; logs=/var/log/httpd/domains/bamhairsalo ...
show more
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=www.bamhairsalon.gr; logs=/var/log/httpd/domains/bamhairsalon.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
Showing 1 to
9
of 9 reports