🇦🇺
screwlooseit.com.au
2026-10-22 11:58:58
UTC ·
(3 weeks ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
ID/Indonesia/-
Web App Attack
🇺🇸
IndigoRidge
2026-10-22 11:41:54
UTC ·
(3 weeks ago)
36.83.73.80 - - [22/Oct/2026:07:39:57 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5128 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [22/Oct/2026:07:40:08 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5128 "-" "WordPress.com; https://wordpress.com"
...
show more
36.83.73.80 - - [22/Oct/2026:07:39:57 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5128 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [22/Oct/2026:07:40:08 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5128 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [22/Oct/2026:07:40:29 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5112 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [22/Oct/2026:07:41:22 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5112 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [22/Oct/2026:07:41:53 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5112 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
Anonymous
2026-10-22 04:37:39
UTC ·
(3 weeks ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
🇳🇱
Alt255
2026-10-20 20:17:42
UTC ·
(3 weeks ago)
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 36.83.73.80 - - [20/Oct/2026:22:13:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5956 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress ...
show more
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 36.83.73.80 - - [20/Oct/2026:22:13:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5956 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)"
36.83.73.80 - - [20/Oct/2026:22:14:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5956 "-" "Jetpack/12.1; WordPress/6.4; http://site80002209.com"
36.83.73.80 - - [20/Oct/2026:22:16:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5956 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)"
36.83.73.80 - - [20/Oct/2026:22:17:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5956 "-" "WordPress.com; https://wordpress.com"
...
show less
Brute-Force
Web App Attack
🇺🇸
IndigoRidge
2026-10-20 16:57:08
UTC ·
(3 weeks ago)
36.83.73.80 - - [20/Oct/2026:12:52:11 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5318 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [20/Oct/2026:12:54:06 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5318 "-" "WordPress.com; https://wordpress.com"
...
show more
36.83.73.80 - - [20/Oct/2026:12:52:11 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5318 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [20/Oct/2026:12:54:06 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5318 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [20/Oct/2026:12:55:48 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5318 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [20/Oct/2026:12:56:41 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5318 "-" "WordPress.com; https://wordpress.com"
36.83.73.80 - - [20/Oct/2026:12:57:06 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5318 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
Anonymous
2026-10-20 10:59:52
UTC ·
(3 weeks ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
Anonymous
2026-10-20 10:58:49
UTC ·
(3 weeks ago)
(wordpress) Failed wordpress login from 36.83.73.80 (ID/Indonesia/-)
Brute-Force
🇦🇺
screwlooseit.com.au
2026-10-19 22:58:04
UTC ·
(3 weeks ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
ID/Indonesia/-
Web App Attack
Anonymous
2026-10-19 06:07:57
UTC ·
(3 weeks ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
🇺🇸
jimwasson
2026-10-02 16:39:00
UTC ·
(1 month ago)
Apparent Mikrotik router exploit attempt. Along with several others from different nets of the domain telkom.co.id on the same day.
Log entry:
2026-10-01 18:51:53 firewall,info SSH_ATTEMPT: input: in:ether24 out:(unknown 0), connection-state:new s ...
show more
Apparent Mikrotik router exploit attempt. Along with several others from different nets of the domain telkom.co.id on the same day.
Log entry:
2026-10-01 18:51:53 firewall,info SSH_ATTEMPT: input: in:ether24 out:(unknown 0), connection-state:new src-mac E4:8D:8C:35:67:B2, proto TCP (SYN), 36.83.73.80:22822->xxx.xxx.xxx.xxx:50022, len 60
2026-10-01 18:51:56 system,error,critical login failure for user -2 from 36.83.73.80 via ssh
show less
SSH