AbuseIPDB » 189.80.254.143
189.80.254.143
This IP was reported 6 times. Confidence of
Abuse
is 34% : ?
ISP
V tal
Usage Type
Fixed Line ISP
ASN
AS7738
Hostname(s)
18980254143.user.veloxzone.com.br
Domain Name
vtal.com
Country
🇧🇷
Brazil
City
Sao Paulo, Sao Paulo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 189.80.254.143 :
This IP address has been reported a total of
6
times from
5 distinct
sources.
189.80.254.143 was first reported on
July 16th 2026 , and the most recent report was
5 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
n2nguyenn2nguyen
2026-07-17 18:14:24
(5 hours ago)
Blocked by YFC Security on https://brixzly.com — type: xmlrpc_attempts
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-07-17 08:28:50
(15 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
2026-07-16 23:45:32
(1 day ago)
[redacted] 189.80.254.143 - - [17/Jul/2026:01:44:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 189.80.254.143 - - [17/Jul/2026:01:44:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 189.80.254.143 - - [17/Jul/2026:01:44:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site71340640.com"
[redacted] 189.80.254.143 - - [17/Jul/2026:01:45:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site69263891.com"
[redacted] 189.80.254.143 - - [17/Jul/2026:01:45:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 189.80.254.143 - - [17/Jul/2026:01:45:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
🇫🇷
masterguru
2026-07-16 18:07:22
(1 day ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇺🇸
IndigoRidge
2026-07-16 17:36:58
(1 day ago)
189.80.254.143 - - [16/Jul/2026:13:35:02 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5090 "-" "WordPress. ...
show more
189.80.254.143 - - [16/Jul/2026:13:35:02 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5090 "-" "WordPress.com; https://wordpress.com"
189.80.254.143 - - [16/Jul/2026:13:35:23 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5090 "-" "WordPress.com; https://wordpress.com"
189.80.254.143 - - [16/Jul/2026:13:35:54 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5090 "-" "WordPress.com; https://wordpress.com"
189.80.254.143 - - [16/Jul/2026:13:36:47 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5090 "-" "WordPress.com; https://wordpress.com"
189.80.254.143 - - [16/Jul/2026:13:36:57 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5090 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
🇫🇷
dynamix
2026-07-16 04:24:51
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: