Report for IP: 154.28.229.163

This IP requested many different non-existent pages within a short window — the signature of an automated sweep working through a wordlist of guessed paths, regardless of which specific filenames it tried. A real visitor following broken links, or a search-engine crawler, never generates this volume of distinct 404s from one IP in under a minute.

This IP targeted xmlrpc.php, a legacy WordPress endpoint that has been abused for brute-force authentication attacks, credential stuffing, and DDoS amplification. Any direct access to xmlrpc.php is an attack or reconnaissance attempt; modern WordPress sites should disable it entirely.