Anonymous
2026-09-13 02:37:03
(21 hours ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇩🇪
LRob
2026-09-13 00:08:54
(23 hours ago)
WordPress login brute-force | path: /xmlrpc.php | 2026-09-13 00:08 UTC
Brute-Force
Web App Attack
🇩🇪
rh24
2026-09-13 00:08:34
(23 hours ago)
(xmlrpc_405) XMLRPC-Bot 405 68.59.149.145 (US/United States/c-68-59-149-145.hsd1.tn.comcast.net)
Hacking
🇳🇱
Site.eu
2026-09-12 09:20:28
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
IndigoRidge
2026-09-12 07:31:12
(1 day ago)
68.59.149.145 - - [12/Sep/2026:03:29:45 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5122 "-" "WordPress.c ...
show more
68.59.149.145 - - [12/Sep/2026:03:29:45 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5122 "-" "WordPress.com; https://wordpress.com"
68.59.149.145 - - [12/Sep/2026:03:30:06 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5122 "-" "WordPress.com; https://wordpress.com"
68.59.149.145 - - [12/Sep/2026:03:30:49 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5122 "-" "WordPress.com; https://wordpress.com"
68.59.149.145 - - [12/Sep/2026:03:31:00 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5122 "-" "WordPress.com; https://wordpress.com"
68.59.149.145 - - [12/Sep/2026:03:31:10 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5122 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
🇲🇾
Rizzy
2026-09-12 06:03:50
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-09-12 06:03:46
(1 day ago)
[redacted] 68.59.149.145 - - [12/Sep/2026:08:03:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 68.59.149.145 - - [12/Sep/2026:08:03:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site15017020.com"
[redacted] 68.59.149.145 - - [12/Sep/2026:08:03:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 68.59.149.145 - - [12/Sep/2026:08:03:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site78007377.com"
[redacted] 68.59.149.145 - - [12/Sep/2026:08:03:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 68.59.149.145 - - [12/Sep/2026:08:03:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
🇧🇪
cmbplf
2026-09-12 05:31:46
(1 day ago)
3.065 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇩🇪
ghostwarriors
2026-09-11 21:50:08
(2 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-11 21:39:35
(2 days ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-09-11 21:30:51
(2 days ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
🇫🇷
dynamix
2026-09-11 19:33:29
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-09-11 05:33:56
(2 days ago)
cloudlinux2 fail2ban: 2026-09-11 07:29:51,345 fail2ban.filter [1606]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-11 07:29:51,345 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.78.123.83 - 2026-09-11 07:29:51cloudlinux2 fail2ban: 2026-09-11 07:29:51,180 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.78.123.83 - 2026-09-11 07:29:51cloudlinux2 fail2ban: 2026-09-11 07:29:51,336 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.78.123.83 - 2026-09-11 07:29:51cloudlinux2 fail2ban: 2026-09-11 07:29:51,356 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.78.123.83 - 2026-09-11 07:29:51cloudlinux2 fail2ban: 2026-09-11 07:29:51,351 fail2ban.actions [1606]: NOTICE [plesk-modsecurity] Ban 34.78.123.83cloudlinux2 fail2ban: 2026-09-11 07:29:51,639 fail2ban.filter [1606]: INFO [recidive] Found 34.78.123.83 - 2026-09-11 07:29:51cloudlinux2 fail2ban: 2026-09-11 07:30:51,748 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 68.59.149.145 - 2026-09-11 07:30:51cloudlinux2 fail2ban: 2026-09-11 0
show less
Brute-Force
🇸🇬
abuseipreport.darajati
2026-09-11 03:07:32
(2 days ago)
68.59.149.145 - - [2026-09-11T11:06:50+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack/13.0; ...
show more
68.59.149.145 - - [2026-09-11T11:06:50+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack/13.0; WordPress/6.4; http://site40455818.com"
68.59.149.145 - - [2026-09-11T11:07:00+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com"
68.59.149.145 - - [2026-09-11T11:07:10+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com"
68.59.149.145 - - [2026-09-11T11:07:21+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "WordPress.com; https://wordpress.com"
68.59.149.145 - - [2026-09-11T11:07:32+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack/12.1; WordPress/6.1; http://site98259700.com"
...
show less
Web App Attack
🇲🇹
Malta
2026-09-10 16:14:45
(3 days ago)
68.59.149.145 - - [10/Sep/2026:18:14:45 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.com ...
show more
68.59.149.145 - - [10/Sep/2026:18:14:45 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.com"
show less
Hacking
Web App Attack