AbuseIPDB » 79.252.121.38
79.252.121.38
This IP was reported 6 times. Confidence of
Abuse
is 40% : ?
ISP
Deutsche Telekom AG
Usage Type
Fixed Line ISP
ASN
AS3320
Hostname(s)
p4ffc7926.dip0.t-ipconnect.de
Domain Name
telekom.de
Country
🇩🇪
Germany
City
Berlin, State of Berlin
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 79.252.121.38 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
79.252.121.38 was first reported on
July 16th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-18 07:09:29
(1 day ago)
[redacted] 79.252.121.38 - - [18/Jul/2026:09:08:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "M ...
show more
[redacted] 79.252.121.38 - - [18/Jul/2026:09:08:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/90.0.0.0 Safari/537.36"
[redacted] 79.252.121.38 - - [18/Jul/2026:09:08:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/70.0.0.0 Safari/537.36"
[redacted] 79.252.121.38 - - [18/Jul/2026:09:09:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/92.0.0.0 Safari/537.36"
[redacted] 79.252.121.38 - - [18/Jul/2026:09:09:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/92.0.0.0 Safari/537.36"
[redacted] 79.252.121.38 - - [18/Jul/2026:09:09:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac O
...
show less
Hacking
Web App Attack
🇳🇿
Tripwire
2026-07-18 06:26:56
(1 day ago)
Probing for Wordpress - /xmlrpc.php
Brute-Force
Web App Attack
🇫🇮
inlink.ltd
2026-07-18 04:26:48
(1 day ago)
Known malicious PHP file or CMS probe
Web App Attack
🇺🇸
ctidrv
2026-07-18 04:26:33
(1 day ago)
Honeypot detection. Threat score: 45/100. Collector: honeypot. | Request: GET /xmlrpc.php | UA: Mozi ...
show more
Honeypot detection. Threat score: 45/100. Collector: honeypot. | Request: GET /xmlrpc.php | UA: Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/95.0.0.0 Safari/537.36 | rDNS: p4ffc7926.dip0.t-ipconnect.de | Reasons: suspicious_path, no_sec_fetch, no_cookies, no_accept_encoding
show less
Bad Web Bot
🇮🇹
VHosting
2026-07-18 04:05:04
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇫🇷
giulio gorobey
2026-07-16 23:23:55
(3 days ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /xmlrpc.php
Web App Attack
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: