This IP address has been reported a total of
7
times from
7 distinct
sources.
122.167.145.20 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/abts-kk-dynamic-020.145.167.122.airtelbroadband.i ...
show moreBlocked by CSF 13 firewall - Rule: XMLRPC
IN/India/abts-kk-dynamic-020.145.167.122.airtelbroadband.in
show less
Web App Attack
Anonymous
[redacted] 122.167.145.20 - - [25/Jun/2026:07:42:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more[redacted] 122.167.145.20 - - [25/Jun/2026:07:42:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/14.0.0.0 Safari/537.36"
[redacted] 122.167.145.20 - - [25/Jun/2026:07:42:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/90.0.0.0 Safari/537.36"
[redacted] 122.167.145.20 - - [25/Jun/2026:07:42:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/78.0.0.0 Safari/537.36"
[redacted] 122.167.145.20 - - [25/Jun/2026:07:43:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.0.0 Safari/537.36"
[redacted] 122.167.145.20 - - [25/Jun/2026:07:43:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405
...
show less
[TueJun2310:44:37.1226872026][security2:error][pid965387:tid965677][client122.167.145.20:0]ModSecuri ...
show more[TueJun2310:44:37.1226872026][security2:error][pid965387:tid965677][client122.167.145.20:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"viaggi-marocco-lugano.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajpHdbzLynaffsdV_qkW8AAAANU\"]
show less
Hacking
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ