🇫🇷
Hippoline
2026-10-09 04:17:24
UTC ·
(1 month ago)
[Fri Oct 09 06:14:00.563489 2026] [authz_core:error] [pid 20929] [client 187.188.41.151:18245] AH01630: client denied by server configuration: /var/www/clients/client3/web4/web/xmlrpc.php
[Fri Oct 09 06:15:05.352370 2026] [authz_core:error] [pid 2093 ...
show more
[Fri Oct 09 06:14:00.563489 2026] [authz_core:error] [pid 20929] [client 187.188.41.151:18245] AH01630: client denied by server configuration: /var/www/clients/client3/web4/web/xmlrpc.php
[Fri Oct 09 06:15:05.352370 2026] [authz_core:error] [pid 20936] [client 187.188.41.151:28146] AH01630: client denied by server configuration: /var/www/clients/client3/web4/web/xmlrpc.php
[Fri Oct 09 06:17:12.503915 2026] [authz_core:error] [pid 20994] [client 187.188.41.151:27615] AH01630: client denied by server configuration: /var/www/clients/client3/web4/web/xmlrpc.php
[Fri Oct 09 06:17:23.473977 2026] [authz_core:error] [pid 2092] [client 187.188.41.151:27842] AH01630: client denied by server configuration: /var/www/clients/client3/web4/web/xmlrpc.php
[Fri Oct 09 06:17:24.396359 2026] [access_compat:error] [pid 20933] [client 187.188.41.151:27873] AH01797: client denied by server configuration: /var/www/hippoline.lu/web/xmlrpc.php
...
show less
Brute-Force
Web App Attack
🇨🇭
4server
2026-10-09 03:56:56
UTC ·
(1 month ago)
[FriOct0905:56:49.9006702026][security2:error][pid2122164:tid2122264][client187.188.41.151:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\ ...
show more
[FriOct0905:56:49.9006702026][security2:error][pid2122164:tid2122264][client187.188.41.151:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"gamotors.ch\"][uri\"/xmlrpc.php\"][unique_id\"ashmAVxjLVXf5MsATgXO7AAAAQw\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 00:43:18
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 187.188.41.151 (fixed-187-188-41-151.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:43:11.587197 2026] [security2:error] [pid 17183:tid 171 ...
show more
(mod_security) mod_security (id:210350) triggered by 187.188.41.151 (fixed-187-188-41-151.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:43:11.587197 2026] [security2:error] [pid 17183:tid 17183] [client 187.188.41.151:24425] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||saudivista.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "saudivista.com"] [uri "/"] [unique_id "asREH_rx0iOfysPPPkn12AAAAAk"], referer: https://buyhighqualitybacklinks.store/dir/managed-link-building-183157
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-10-03 12:27:04
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇦🇺
screwlooseit.com.au
2026-10-03 05:51:43
UTC ·
(1 month ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
MX/Mexico/fixed-187-188-41-151.totalplay.net
Web App Attack
🇫🇷
masterguru
2026-10-02 16:36:11
UTC ·
(1 month ago)
(xmlrpc) Apache: Failed xmlrpc access from 187.188.41.151 (MX/Mexico/fixed-187-188-41-151.totalplay.net): 10 in the last 3600 secs (0-201)
Hacking
🇺🇸
鬼影233
2026-10-01 20:56:21
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 17:06:56
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 15:30:07
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 13:20:36
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 11:20:17
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 187.188.41.151 (fixed-187-188-41-151.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 07:20:10.937362 2026] [security2:error] [pid 16082:tid 160 ...
show more
(mod_security) mod_security (id:210350) triggered by 187.188.41.151 (fixed-187-188-41-151.totalplay.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 07:20:10.937362 2026] [security2:error] [pid 16082:tid 16082] [client 187.188.41.151:16520] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fernfield.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fernfield.com"] [uri "/interviews/"] [unique_id "ar5B6mr_--8eedgZNJizNgAAAA0"], referer: https://fernfield.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-30 12:38:54
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
RH5
2026-09-28 05:09:22
UTC ·
(1 month ago)
Restricted URL probing (/xmlrpc.php) (UTC 2026-09-28 05:09)
Web App Attack
🇫🇷
masterguru
2026-09-28 04:14:46
UTC ·
(1 month ago)
(xmlrpc) Apache: Failed xmlrpc access from 187.188.41.151 (MX/Mexico/fixed-187-188-41-151.totalplay.net): 10 in the last 3600 secs (0-201)
Hacking
2026-09-28 03:07:33
UTC ·
(1 month ago)
[redacted] 187.188.41.151 - - [28/Sep/2026:05:07:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/92.0.0.0 Safari/537.36"
[redacted] 187.188.41.151 - - [28/Sep/2026:05: ...
show more
[redacted] 187.188.41.151 - - [28/Sep/2026:05:07:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/92.0.0.0 Safari/537.36"
[redacted] 187.188.41.151 - - [28/Sep/2026:05:07:29 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.0.0 Safari/537.36"
[redacted] 187.188.41.151 - - [28/Sep/2026:05:07:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/92.0.0.0 Safari/537.36"
[redacted] 187.188.41.151 - - [28/Sep/2026:05:07:31 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/82.0.0.0 Safari/537.36"
[redacted] 187.188.41.151 - - [28/Sep/2026:05:07:32 +0200] "POST /xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like
...
show less
Hacking
Web App Attack
