[ThuSep0322:32:18.8646242026][security2:error][pid3384300:tid3384389][client36.68.52.146:0]ModSecuri ...
show more[ThuSep0322:32:18.8646242026][security2:error][pid3384300:tid3384389][client36.68.52.146:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"hdcadvisory.ch\"][uri\"/xmlrpc.php\"][unique_id\"apnZUocAPx2FXqcNs5CCRAAAAMI\"]
show less
36.68.52.146 - - [03/Sep/2026:06:31:11 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Linux; Andro ...
show more36.68.52.146 - - [03/Sep/2026:06:31:11 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/84.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, POST /xmlrpc.php HTTP/1.1, GET /index.php HT ...
show moreBot / scanning and/or hacking attempts: GET / HTTP/1.1, POST /xmlrpc.php HTTP/1.1, GET /index.php HTTP/1.1
show less
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: ...
show moreMalicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /xmlrpc.php | 2026-09-02 20:44 UTC
show less
Hacking
Web App Attack
Anonymous
[redacted] 36.68.52.146 - - [02/Sep/2026:20:17:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mo ...
show more[redacted] 36.68.52.146 - - [02/Sep/2026:20:17:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/80.0.0.0 Safari/537.36"
[redacted] 36.68.52.146 - - [02/Sep/2026:20:17:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/65.0.0.0 Safari/537.36"
[redacted] 36.68.52.146 - - [02/Sep/2026:20:17:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36"
[redacted] 36.68.52.146 - - [02/Sep/2026:20:17:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/96.0.0.0 Safari/537.36"
[redacted] 36.68.52.146 - - [02/Sep/2026:20:17:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Li
...
show less
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: ...
show moreMalicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /xmlrpc.php | 2026-09-02 07:36 UTC
show less
[WedSep0209:33:08.0144822026][security2:error][pid1132717:tid1132835][client36.68.52.146:0]ModSecuri ...
show more[WedSep0209:33:08.0144822026][security2:error][pid1132717:tid1132835][client36.68.52.146:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"respiratrentino.it\"][uri\"/xmlrpc.php\"][unique_id\"apfRNP1ezWFeU8h6c5NUjwAAAQs\"]
show less
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: ...
show moreMalicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /xmlrpc.php | 2026-09-01 18:59 UTC
show less
Hacking
Web App Attack
Showing 1 to
15
of 39 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ