🇮🇹
sssrit
2026-04-12 11:48:11
(1 month ago)
104.207.45.78 - - [12/Apr/2026:13:47:55 +0200] "GET /wp-admin/ HTTP/1.1" 302 5 "https://onida.sssr.i ...
show more
104.207.45.78 - - [12/Apr/2026:13:47:55 +0200] "GET /wp-admin/ HTTP/1.1" 302 5 "https://onida.sssr.it/wp-admin" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
104.207.45.78 - - [12/Apr/2026:13:48:00 +0200] "GET /wp-login.php HTTP/1.1" 200 7997 "https://onida.sssr.it/wp-login.php?redirect_to=https%3A%2F%2Fonida.sssr.it%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
104.207.45.78 - - [12/Apr/2026:13:48:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "https://onida.sssr.it/regime-forfettario-2026-guida-completa-e-confronto-operativo/" "PHP/5.2.08"
...
show less
Web App Attack
2026-03-28 04:43:39
(2 months ago)
Forum/form spam
Web Spam
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
windowsforum
2026-02-23 15:23:05
(3 months ago)
Spam bot registration: triggers=timing, js_challenge, inv_honeypot, pow_fail, username=HerminePet
Web Spam
Bad Web Bot
2026-02-07 08:51:26
(3 months ago)
Forum/form spam
Web Spam
🇺🇸
mind5t0rm
2026-01-23 06:20:54
(4 months ago)
(XMLRPC) WP XMLPRC Attack 104.207.45.78 (US/United States/-): 3 in the last 3600 secs; Ports: *; Dir ...
show more
(XMLRPC) WP XMLPRC Attack 104.207.45.78 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 104.207.45.78 - - [23/Jan/2026:13:20:43 +0700] "POST /xmlrpc.php HTTP/1.1" 403 165 "-" "curl/7.88.1"
104.207.45.78 - - [23/Jan/2026:13:20:51 +0700] "POST /xmlrpc.php HTTP/1.1" 403 165 "-" "curl/8.6.0"
104.207.45.78 - - [23/Jan/2026:13:20:51 +0700] "POST /xmlrpc.php HTTP/1.1" 403 165 "-" "curl/8.6.0"
show less
Port Scan
🇫🇷
LRob.fr
2026-01-20 18:00:04
(4 months ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
2026-01-13 23:29:27
(4 months ago)
Forum/form spam
Web Spam
🇳🇱
homeshowdomain.nl
2026-01-02 23:00:27
(5 months ago)
Auto-ban: >3000 req/min op 2026-01-02
Hacking
Web App Attack
SSH
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:14
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇮🇹
VHosting
2025-12-23 14:20:28
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇺🇸
nowyouknow
2025-11-28 04:28:37
(6 months ago)
(From [email protected] ) Hello,
Greetings from United Electrical Contractors. ...
show more
(From [email protected] ) Hello,
Greetings from United Electrical Contractors. After reviewing your services, we are interested in sourcing materials/services from your organization for an upcoming project.
I am reaching out to confirm your company’s current capacity, as we have a project starting soon. Please provide a quotation for your services so we can proceed with our planning.
Additionally, kindly review the attached document and let us know if you have any questions or updates regarding feasibility or capabilities. We are ready to move forward once we receive your feedback.
Regards,
Mckee Sean
show less
Phishing
Web Spam
🇺🇸
TPI-Abuse
2025-11-26 07:06:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:06:20.609539 2025] [security2:error] [pid 16575:tid 16575] [client 104.207.45.78:45179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.epicureankids.com"] [uri "/.git/HEAD"] [unique_id "aSam7HCNvIo_9KCaaf0sFAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:17:02
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:16:57.782093 2025] [security2:error] [pid 2198742:tid 2198742] [client 104.207.45.78:10175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.copiersraleigh.com"] [uri "/.env"] [unique_id "aSZVCZZ23VI7RS1LlqLcBwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
oncord
2025-11-24 20:21:27
(6 months ago)
Form spam
Web Spam