I have had an activity log plugin running for a couple of weeks.
Automated updates to the sitemap xml files show up in this plugin. These usually have localhost as the IP address (127.0.0.1)
Recently it has been showing external ip addresses. Also, there is a recent action listed as ‘Trashed’ whereas the only action previously shown was ‘Updated’
The pages that show in the activity log are:
jp_img_sitemap image-sitemap-1.xml
jp_sitemap_master sitemap.xml
jp_sitemap sitemap-1.xml
Does this look like Jetpack plugin behavior? Do you know why it would start showing external ip addresses?