๐บ๐ธ
cwytech
2026-06-21 03:48:56
(3 hours ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
๐บ๐ธ
Jason Howell
2026-06-20 19:54:29
(11 hours ago)
223.185.27.148 - - [20/Jun/2026:14:37:17 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4736 "-" "Jetpack by ...
show more
223.185.27.148 - - [20/Jun/2026:14:37:17 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4736 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)"
223.185.27.148 - - [20/Jun/2026:14:48:02 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4737 "-" "WordPress.com; https://wordpress.com"
223.185.27.148 - - [20/Jun/2026:14:50:12 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4738 "-" "Jetpack by WordPress.com"
223.185.27.148 - - [20/Jun/2026:14:52:20 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4738 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)"
223.185.27.148 - - [20/Jun/2026:14:54:28 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4738 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)"
...
show less
Web App Attack
๐บ๐ธ
Jason Howell
2026-06-20 19:14:58
(12 hours ago)
223.185.27.148 - - [20/Jun/2026:14:06:27 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3394 "-" "WordPress. ...
show more
223.185.27.148 - - [20/Jun/2026:14:06:27 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3394 "-" "WordPress.com; https://wordpress.com"
223.185.27.148 - - [20/Jun/2026:14:08:34 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3394 "-" "Jetpack by WordPress.com"
223.185.27.148 - - [20/Jun/2026:14:10:42 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3394 "-" "Jetpack/12.1; WordPress/6.4; http://site40706467.com"
223.185.27.148 - - [20/Jun/2026:14:12:49 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3394 "-" "WordPress.com; https://wordpress.com"
223.185.27.148 - - [20/Jun/2026:14:14:57 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3393 "-" "Jetpack/12.0; WordPress/6.2; http://site58429760.com"
...
show less
Web App Attack
Anonymous
2026-06-20 19:07:25
(12 hours ago)
[redacted] 223.185.27.148 - - [20/Jun/2026:21:06:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 223.185.27.148 - - [20/Jun/2026:21:06:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 223.185.27.148 - - [20/Jun/2026:21:06:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 223.185.27.148 - - [20/Jun/2026:21:07:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)"
[redacted] 223.185.27.148 - - [20/Jun/2026:21:07:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 223.185.27.148 - - [20/Jun/2026:21:07:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
Anonymous
2026-06-20 17:04:01
(14 hours ago)
[redacted] 223.185.27.148 - - [20/Jun/2026:19:03:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 223.185.27.148 - - [20/Jun/2026:19:03:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site70505598.com"
[redacted] 223.185.27.148 - - [20/Jun/2026:19:03:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site29708633.com"
[redacted] 223.185.27.148 - - [20/Jun/2026:19:03:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 223.185.27.148 - - [20/Jun/2026:19:03:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 223.185.27.148 - - [20/Jun/2026:19:04:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
...
show less
Hacking
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-06-20 07:40:04
(23 hours ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/-
Web App Attack
Anonymous
2026-06-20 07:06:13
(1 day ago)
Trying to access config files
Web App Attack
Anonymous
2026-06-19 19:04:01
(1 day ago)
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=electromecanica.gr; logs=/var/log/httpd/domains/electromecan ...
show more
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=electromecanica.gr; logs=/var/log/httpd/domains/electromecanica.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-06-19 11:47:49
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ณ๐ฑ
wlt-blocker
2026-06-19 03:15:26
(2 days ago)
Unauthorized access to webpage admin
Web App Attack
Anonymous
2026-06-19 02:43:31
(2 days ago)
(wordpress) Failed wordpress login from 223.185.27.148 (IN/India/-)
Brute-Force
๐ฉ๐ช
rh24
2026-06-18 20:54:45
(2 days ago)
(xmlrpc_405) XMLRPC-Bot 405 223.185.27.148 (IN/India/-)
Hacking
๐ฆ๐บ
screwlooseit.com.au
2026-06-18 14:44:19
(2 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/-
Web App Attack
๐ซ๐ท
masterguru
2026-06-18 10:38:32
(2 days ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
Anonymous
2026-06-18 06:21:05
(3 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack