๐ฉ๐ช
YF
2026-10-12 13:00:21
(3 days ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
๐บ๐ธ
IndigoRidge
2026-10-09 12:26:33
(6 days ago)
41.139.234.147 - - [09/Oct/2026:08:20:15 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5090 "-" "WordPress. ...
show more
41.139.234.147 - - [09/Oct/2026:08:20:15 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5090 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [09/Oct/2026:08:22:27 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5090 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [09/Oct/2026:08:25:23 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5504 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [09/Oct/2026:08:26:19 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5504 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [09/Oct/2026:08:26:32 -0400] "POST /xmlrpc.php HTTP/1.1" 403 5504 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-09 11:06:10
(6 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
Anonymous
2026-10-08 07:34:03
(1 week ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
Anonymous
2026-10-08 06:02:27
(1 week ago)
[redacted] 41.139.234.147 - - [08/Oct/2026:08:01:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 41.139.234.147 - - [08/Oct/2026:08:01:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 41.139.234.147 - - [08/Oct/2026:08:01:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 41.139.234.147 - - [08/Oct/2026:08:02:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 41.139.234.147 - - [08/Oct/2026:08:02:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 41.139.234.147 - - [08/Oct/2026:08:02:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)"
...
show less
Hacking
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-02 12:23:59
(1 week ago)
41.139.234.147 - - [02/Oct/2026:08:21:50 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5210 "-" "WordPress. ...
show more
41.139.234.147 - - [02/Oct/2026:08:21:50 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5210 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [02/Oct/2026:08:22:12 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5210 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [02/Oct/2026:08:22:44 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5210 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [02/Oct/2026:08:23:27 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5210 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [02/Oct/2026:08:23:59 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5210 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
๐ฉ๐ช
NewWavesApp
2026-10-02 10:24:16
(1 week ago)
(wordpress) Failed wordpress login from 41.139.234.147 (KE/Kenya/41-139-234-147.safaricombusiness.co ...
show more
(wordpress) Failed wordpress login from 41.139.234.147 (KE/Kenya/41-139-234-147.safaricombusiness.co.ke): (CF_ENABLE)
show less
Brute-Force
๐ณ๐ฑ
Site.eu
2026-09-28 11:29:22
(2 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
Anonymous
2026-09-28 11:02:03
(2 weeks ago)
[redacted] 41.139.234.147 - - [28/Sep/2026:13:01:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 41.139.234.147 - - [28/Sep/2026:13:01:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site61628051.com"
[redacted] 41.139.234.147 - - [28/Sep/2026:13:01:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site42967603.com"
[redacted] 41.139.234.147 - - [28/Sep/2026:13:01:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)"
[redacted] 41.139.234.147 - - [28/Sep/2026:13:01:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site64615284.com"
[redacted] 41.139.234.147 - - [28/Sep/2026:13:02:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
๐ฉ๐ช
konseptit
2026-09-25 09:43:59
(2 weeks ago)
(wordpress) Failed wordpress login from 41.139.234.147 (KE/Kenya/41-139-234-147.safaricombusiness.co ...
show more
(wordpress) Failed wordpress login from 41.139.234.147 (KE/Kenya/41-139-234-147.safaricombusiness.co.ke)
show less
Brute-Force
Anonymous
2026-09-24 06:08:33
(3 weeks ago)
41.139.234.147 - - [24/Sep/2026:08:08:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428
41.139.234.147 - ...
show more
41.139.234.147 - - [24/Sep/2026:08:08:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428
41.139.234.147 - - [24/Sep/2026:08:08:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428
...
show less
Brute-Force
Bad Web Bot
Anonymous
2026-09-23 07:00:35
(3 weeks ago)
[ns41.kdns.gr] httpd-xmlrpc-post: sites=www.msjacovides.com; logs=/var/log/httpd/domains/msjacovides ...
show more
[ns41.kdns.gr] httpd-xmlrpc-post: sites=www.msjacovides.com; logs=/var/log/httpd/domains/msjacovides.com.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
๐ซ๐ฎ
YF
2026-09-22 05:00:41
(3 weeks ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
๐บ๐ธ
IndigoRidge
2026-09-21 06:30:10
(3 weeks ago)
41.139.234.147 - - [21/Sep/2026:02:28:45 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5143 "-" "WordPress. ...
show more
41.139.234.147 - - [21/Sep/2026:02:28:45 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5143 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [21/Sep/2026:02:29:06 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5143 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [21/Sep/2026:02:29:27 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5143 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [21/Sep/2026:02:29:59 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5143 "-" "WordPress.com; https://wordpress.com"
41.139.234.147 - - [21/Sep/2026:02:30:09 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5143 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
๐ซ๐ท
Kenshin869
2026-09-19 08:17:12
(3 weeks ago)
Wordpress unauthorized access attempt
Brute-Force