alzer

Just got 3 emails from Sucuri saying something similar. I installed Jetpack on the site for the first time on Wednesday, having never used it before. I’ve never received emails like this before, which to me indicates it’s Jetpack. The messages:-

Event: Post Update
Website: ……..
IP Address: 79.170.244.61
Date/Time: June 30, 2017 10.09pm

Message: Jp_sitemap_master status has been changed; details: ID 962,Old status:new;New status: draft,Title: sitemap.xml

What’s going on?

• This reply was modified 7 years, 8 months ago by alzer.

That did nothing. Brute Force Login Protection has blocked about 50 emails since I sis the above. I’m going to try editing the .htaccess file with:

<Files “xmlrpc.php”>
Order Allow,Deny
deny from all
</Files>

Just tried your solution sy2j. As you reported, typing sitename.com/wp-register was re-directing to my re-named login page and my site was continuing to get hammered by attackers. Will report back in a few days

How far back do the logs go? The API only appears to be giving me since early December.