This shell command can be used on cPanel servers and does the following: – Scans all access log files for IP addresses which sent a POST request to all wp-login.php files on all domains/subdomains/addon domains on the server during the last 24 hours – It groups and sorts all the IP addresses, based on the… Read More: Find IP has attacked wp-login »

The SQL to do this queries the INFORMATION_SCHEMA and is as follows: SELECT table_schema, table_name FROM INFORMATION_SCHEMA.TABLES WHERE engine = ‘innodb’; where: table_schema is the name of the database. table_name is (obviously) the name of the table.