[ThuOct0116:39:32.8589772026][security2:error][pid3481482:tid3481558][client82.59.100.74:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"9 ...
show more[ThuOct0116:39:32.8589772026][security2:error][pid3481482:tid3481558][client82.59.100.74:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"mondialtrade.ch\"][uri\"/xmlrpc.php\"][unique_id\"ar5wpGKFMdS02x7Kwbnu8wAAAA4\"]
show less
[Thu Sep 24 14:00:02.500626 2026] [php:error] [pid 6304:tid 8836] [client 82.59.100.74:63002] script 'D:/wamp64/www/......./xmlrpc.php' not found or unable to stat
Brute-Force
Bad Web Bot
Web App Attack
Hacking
Anonymous
[redacted] 82.59.100.74 - - [24/Sep/2026:18:09:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/82.0.0.0 Safari/537.36"
[redacted] 82.59.100.74 - - [24/Sep/20 ...
show more[redacted] 82.59.100.74 - - [24/Sep/2026:18:09:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/82.0.0.0 Safari/537.36"
[redacted] 82.59.100.74 - - [24/Sep/2026:18:09:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/94.0.0.0 Safari/537.36"
[redacted] 82.59.100.74 - - [24/Sep/2026:18:09:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/94.0.0.0 Safari/537.36"
[redacted] 82.59.100.74 - - [24/Sep/2026:18:09:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.0.0 Safari/537.36"
medx-[redacted] 82.59.100.74 - - [24/Sep/2026:18:09:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac O
...
show less
(wordpress) Failed wordpress login from 82.59.100.74 (IT/Italy/Province of Naples/Mariglianella/host-82-59-100-74.retail.telecomitalia.it/[redacted]): (CF_ENABLE)
This address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack t ...
show moreThis address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack tools, blocked on sight. Please check the machine behind it. | method: POST | path: /xmlrpc.php | 2026-09-23 15:31 UTC
show less
Web App Attack
Hacking
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown