|
Anonymous
|
|
[redacted] 36.80.184.128 - - [14/Sep/2026:09:23:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)"
[redacted] 36.80.184.128 - - [14/Sep/2026:09:23:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 ...
show more
[redacted] 36.80.184.128 - - [14/Sep/2026:09:23:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)"
[redacted] 36.80.184.128 - - [14/Sep/2026:09:23:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)"
[redacted] 36.80.184.128 - - [14/Sep/2026:09:23:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)"
[redacted] 36.80.184.128 - - [14/Sep/2026:09:23:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 36.80.184.128 - - [14/Sep/2026:09:23:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
...
show less
|
Hacking
Web App Attack
|
|
๐ฉ๐ช
LRob
|
|
WordPress login brute-force | path: /xmlrpc.php | 2026-09-14 06:32 UTC
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
[redacted] 36.80.184.128 - - [14/Sep/2026:08:28:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 36.80.184.128 - - [14/Sep/2026:08:28:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by Wo ...
show more
[redacted] 36.80.184.128 - - [14/Sep/2026:08:28:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 36.80.184.128 - - [14/Sep/2026:08:28:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
[redacted] 36.80.184.128 - - [14/Sep/2026:08:28:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 36.80.184.128 - - [14/Sep/2026:08:28:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.1; http://site53985700.com"
[redacted] 36.80.184.128 - - [14/Sep/2026:08:28:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
...
show less
|
Hacking
Web App Attack
|
|
๐ฉ๐ช
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
cwytech
|
|
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wordpress-geofence-sus.
|
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
maxxsense
|
|
(wordpress) Failed wordpress login from 36.80.184.128 (ID/Indonesia/-)
|
Brute-Force
|
|
Anonymous
|
|
[redacted] 36.80.184.128 - - [14/Sep/2026:07:58:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
[redacted] 36.80.184.128 - - [14/Sep/2026:07:58:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 ...
show more
[redacted] 36.80.184.128 - - [14/Sep/2026:07:58:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
[redacted] 36.80.184.128 - - [14/Sep/2026:07:58:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
spineconcept.de 36.80.184.128 - - [14/Sep/2026:07:58:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.5; WordPress/6.2; http://site47246724.com"
[redacted] 36.80.184.128 - - [14/Sep/2026:07:58:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
[redacted] 36.80.184.128 - - [14/Sep/2026:07:58:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
spineconcept.de 36.80.184.128 - - [14/Sep/2026:07:58:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
[redacted] 36.80.184.128 - - [14/Sep/2026:07:58:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.5; WordPress/6.3;
...
show less
|
Hacking
Web App Attack
|
|
๐ณ๐ฑ
Site.eu
|
|
Repeated wp-login/xmlrpc attempts
|
Brute-Force
SSH
|
|
๐ฉ๐ช
FD-IX
|
|
Fail2Ban: WordPress XML-RPC brute-force attack detected.
|
Bad Web Bot
Web App Attack
|
|
๐ฒ๐พ
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
๐ฆ๐บ
screwlooseit.com.au
|
|
Blocked by CSF 13 firewall - Rule: XMLRPC
ID/Indonesia/-
|
Web App Attack
|
|
๐ณ๐ฑ
debestelapp
|
|
|
Web App Attack
|
|
๐ณ๐ฑ
ipoac.nl
|
|
-:443 36.80.184.128 - - [14/Sep/2026:07:42:46 +0200] - "POST /xmlrpc.php HTTP/1.1" 403 4995 "-" "Jetpack by WordPress.com"
|
Bad Web Bot
|
|
๐ณ๐ฑ
Alt255
|
|
[ti-05al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 36.80.184.128 - - [14/Sep/2026:07:41:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5706 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPre ...
show more
[ti-05al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 36.80.184.128 - - [14/Sep/2026:07:41:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5706 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)"
36.80.184.128 - - [14/Sep/2026:07:41:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5706 "-" "Jetpack by WordPress.com"
36.80.184.128 - - [14/Sep/2026:07:41:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5706 "-" "Jetpack/12.1; WordPress/6.4; http://site64916410.com"
36.80.184.128 - - [14/Sep/2026:07:42:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5706 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
...
show less
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
|
Hacking
Web App Attack
|