AbuseIPDB » 5.139.224.159
5.139.224.159
This IP was reported 10 times. Confidence of
Abuse
is 53% : ?
ISP
OJSC Rostelecom Macroregional Branch South
Usage Type
Fixed Line ISP
ASN
AS12389
Domain Name
rt.ru
Country
🇷🇺
Russian Federation
City
Krasnodar, Krasnodar Krai
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 5.139.224.159 :
This IP address has been reported a total of
10
times from
9 distinct
sources.
5.139.224.159 was first reported on
August 27th 2026 , and the most recent report was
4 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-08-29 05:18:16
(4 days ago)
[redacted] 5.139.224.159 - - [29/Aug/2026:07:17:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 5.139.224.159 - - [29/Aug/2026:07:17:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)"
[redacted] 5.139.224.159 - - [29/Aug/2026:07:17:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 5.139.224.159 - - [29/Aug/2026:07:17:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 5.139.224.159 - - [29/Aug/2026:07:18:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 5.139.224.159 - - [29/Aug/2026:07:18:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)"
...
show less
Hacking
Web App Attack
🇺🇸
IndigoRidge
2026-08-29 01:11:22
(5 days ago)
5.139.224.159 - - [28/Aug/2026:21:08:50 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5084 "-" "WordPress.c ...
show more
5.139.224.159 - - [28/Aug/2026:21:08:50 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5084 "-" "WordPress.com; https://wordpress.com"
5.139.224.159 - - [28/Aug/2026:21:09:44 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5084 "-" "WordPress.com; https://wordpress.com"
5.139.224.159 - - [28/Aug/2026:21:10:27 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5084 "-" "WordPress.com; https://wordpress.com"
5.139.224.159 - - [28/Aug/2026:21:11:11 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5084 "-" "WordPress.com; https://wordpress.com"
5.139.224.159 - - [28/Aug/2026:21:11:21 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5084 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
🇧🇪
madeit
2026-08-28 09:42:51
(5 days ago)
Web App Attack
🇺🇸
cwytech
2026-08-28 06:11:37
(5 days ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-08-28 03:50:13
(6 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2026-08-27 23:20:03
(6 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇫🇷
dynamix
2026-08-27 22:49:16
(6 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
IndigoRidge
2026-08-27 18:44:07
(6 days ago)
5.139.224.159 - - [27/Aug/2026:14:42:41 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.c ...
show more
5.139.224.159 - - [27/Aug/2026:14:42:41 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com"
5.139.224.159 - - [27/Aug/2026:14:43:13 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com"
5.139.224.159 - - [27/Aug/2026:14:43:45 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com"
5.139.224.159 - - [27/Aug/2026:14:43:55 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com"
5.139.224.159 - - [27/Aug/2026:14:44:06 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5266 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
🇩🇪
LRob
2026-08-27 17:50:26
(6 days ago)
WordPress login brute-force | path: /xmlrpc.php | 2026-08-27 17:50 UTC
Brute-Force
Web App Attack
🇩🇪
konseptit
2026-08-27 16:08:33
(6 days ago)
(wordpress) Failed wordpress login from 5.139.224.159 (RU/Russia/-)
Brute-Force
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: