189.85.172.12
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Empresa Catarinense de Tecnologia em Telecom. Ltda
- Usage Type
- Fixed Line ISP
- ASN
- AS11844
- Domain Name
- oletelecom.com.br
- Country
- 🇧🇷 Brazil
- City
- Campinas, Santa Catarina
No reports in the last 60 days
189.85.172.12 has been reported 44 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
44 from
31 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 wlt-blocker |
Unauthorized access to webpage admin
|
Web App Attack | |
| 🇨🇦 polycoda |
📡 Port scan
|
Hacking Web App Attack | |
| 🇩🇪 LRob |
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
|
Bad Web Bot Web App Attack | |
| 🇩🇪 SCHAPPY |
Multiple attempts to attack Wordpress XMLRPC detected: access blocked.
|
Web App Attack | |
| 🇫🇷 ✨ |
|
Web App Attack | |
| 🇩🇪 kjaerulff |
Failed Wordpress login using xmlrpc.php (12.172.85.189.dyn.oletelecom.com.br)
|
Web App Attack | |
| 🇳🇱 wlt-blocker |
Unauthorized access to webpage admin
|
Web App Attack | |
| 🇨🇿 ddw |
WordPress XMLRPC.PHP Access Attempt.
|
Hacking Web App Attack | |
| 🇺🇸 juguemosalacarioca.com |
Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080
|
Web App Attack | |
| 🇨🇦 Dunham Support |
(wordpress) Failed wordpress login from 189.85.172.12 (BR/Brazil/12.172.85.189.dyn.oletelecom.com.br)
|
Brute-Force | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /xmlrpc.php HTTP/1.1
|
Hacking Web App Attack | |
| 🇬🇧 poundawebsiteltd |
WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 189.85.172.12 - - [19/Mar/2026:10:48:07 +0000] POST /xmlrpc.php HTTP/1.1 503 22527 - Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/81.0.0.0 Safari/537.36
|
Web App Attack | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa02]
|
Bad Web Bot Web App Attack | |
| 🇫🇷 Baking333 |
|
Bad Web Bot Web App Attack | |
| 🇩🇪 HERA - Operations |
bau-arge - searching for vulnerable scripts: xmlrpc.php 2026/03/19 00:43:25
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown