๐ฉ๐ช
dbmwebdesign
2026-09-24 11:35:06
(10 hours ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
๐ฉ๐ช
konseptit
2026-09-24 10:23:08
(11 hours ago)
(wordpress) Failed wordpress login from 49.37.242.179 (IN/India/-)
Brute-Force
๐ฆ๐บ
screwlooseit.com.au
2026-09-24 08:36:38
(12 hours ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/-
Web App Attack
Anonymous
2026-09-24 06:56:39
(14 hours ago)
[redacted] 49.37.242.179 - - [24/Sep/2026:08:55:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "W ...
show more
[redacted] 49.37.242.179 - - [24/Sep/2026:08:55:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.37.242.179 - - [24/Sep/2026:08:55:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 49.37.242.179 - - [24/Sep/2026:08:55:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.37.242.179 - - [24/Sep/2026:08:56:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 49.37.242.179 - - [24/Sep/2026:08:56:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.37.242.179 - - [24/Sep/2026:08:56:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 49.37.242.179 - - [24/Sep/2026:08:56:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com
...
show less
Hacking
Web App Attack
Anonymous
2026-09-23 09:13:27
(1 day ago)
[redacted] 49.37.242.179 - - [23/Sep/2026:11:12:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "J ...
show more
[redacted] 49.37.242.179 - - [23/Sep/2026:11:12:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)"
[redacted] 49.37.242.179 - - [23/Sep/2026:11:12:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)"
[redacted] 49.37.242.179 - - [23/Sep/2026:11:13:03 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.37.242.179 - - [23/Sep/2026:11:13:12 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Jetpack by WordPress.com"
[redacted] 49.37.242.179 - - [23/Sep/2026:11:13:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "WordPress.com; https://wordpress.com"
...
show less
Hacking
Web App Attack
Anonymous
2026-09-23 04:58:33
(1 day ago)
[redacted] 49.37.242.179 - - [23/Sep/2026:06:57:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "J ...
show more
[redacted] 49.37.242.179 - - [23/Sep/2026:06:57:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.0; WordPress/6.3; http://site21365113.com"
[redacted] 49.37.242.179 - - [23/Sep/2026:06:57:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.37.242.179 - - [23/Sep/2026:06:57:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 49.37.242.179 - - [23/Sep/2026:06:57:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 49.37.242.179 - - [23/Sep/2026:06:58:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com"
[redacted] 49.37.242.179 - - [23/Sep/2026:06:58:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/13.0; WordPress/6.4; http://site16016409.com"
[redacted] 49.37.242.179 - - [23/Sep/2026:06:58:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress
...
show less
Hacking
Web App Attack
๐ฉ๐ช
LRob
2026-09-22 10:02:07
(2 days ago)
This address sends abusive requests to WordPress sites we host: user enumeration through the REST AP ...
show more
This address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack tools, blocked on sight. Please check the machine behind it. | method: POST | path: /xmlrpc.php | 2026-09-22 10:02 UTC
show less
Web App Attack
Hacking
Anonymous
2026-09-22 08:46:53
(2 days ago)
[redacted] 49.37.242.179 - - [22/Sep/2026:10:45:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 49.37.242.179 - - [22/Sep/2026:10:45:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 49.37.242.179 - - [22/Sep/2026:10:46:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.37.242.179 - - [22/Sep/2026:10:46:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 49.37.242.179 - - [22/Sep/2026:10:46:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.3; http://site46752379.com"
[redacted] 49.37.242.179 - - [22/Sep/2026:10:46:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site21630597.com"
...
show less
Hacking
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-22 07:53:44
(2 days ago)
cloudlinux2 fail2ban: 2026-09-22 08:23:53,413 fail2ban.filter [1598]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-22 08:23:53,413 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 82.213.45.58 - 2026-09-22 08:23:53cloudlinux2 fail2ban: 2026-09-22 08:24:02,860 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 82.213.45.58 - 2026-09-22 08:24:02cloudlinux2 fail2ban: 2026-09-22 08:24:03,616 fail2ban.filter [1598]: INFO [recidive] Found 82.213.45.58 - 2026-09-22 08:24:03cloudlinux2 fail2ban: 2026-09-22 08:24:03,607 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Ban 82.213.45.58cloudlinux2 fail2ban: 2026-09-22 08:26:13,052 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 172.98.32.134 - 2026-09-22 08:26:12cloudlinux2 fail2ban: 2026-09-22 08:26:28,645 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 103.174.28.226 - 2026-09-22 08:26:28cloudlinux2 fail2ban: 2026-09-22 08:26:54,125 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 49.37.242.179 - 2026-09-22 08:26:54cloudlinux2 fail2ban: 2026-09-22
show less
Web App Attack
๐บ๐ธ
lcpacs
2026-09-22 07:49:27
(2 days ago)
Auto-flagged by honeypot: tripped /xmlrpc.php โ not US+en-US (country: IN, accept-language: en-US)
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-09-21 07:34:17
(3 days ago)
Web App Attack
Anonymous
2026-09-21 06:44:05
(3 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
๐ซ๐ฎ
inlink.ltd
2026-09-21 06:27:28
(3 days ago)
Known malicious PHP file or CMS probe
Web App Attack
Anonymous
2026-09-21 05:20:03
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ต๐ฑ
gandaflux
2026-09-21 04:46:05
(3 days ago)
49.37.242.179 [redacted-domain] - [21/Sep/2026:06:44:27 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 " ...
show more
49.37.242.179 [redacted-domain] - [21/Sep/2026:06:44:27 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
49.37.242.179 [redacted-domain] - [21/Sep/2026:06:45:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]"
49.37.242.179 [redacted-domain] - [21/Sep/2026:06:45:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Jetpack/12.5; WordPress/6.1; [redacted-url]"
49.37.242.179 [redacted-domain] - [21/Sep/2026:06:45:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]"
49.37.242.179 [redacted-domain] - [21/Sep/2026:06:46:02 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "WordPress.com; [redacted-url]"
show less
Brute-Force
Web App Attack