🇫🇷
solution.it
2026-06-13 20:49:32
(1 day ago)
[Sat Jun 13 22:49:32.599906 2026] [php7:error] [pid 3456707:tid 3456707] [client 216.26.251.76:22533 ...
show more
[Sat Jun 13 22:49:32.599906 2026] [php7:error] [pid 3456707:tid 3456707] [client 216.26.251.76:22533] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat, referer: https://blog.solution.it/wp-login.php
show less
Web App Attack
🇬🇷
setupgr
2026-06-12 15:35:39
(2 days ago)
(mod_security) mod_security (id:900001) triggered by 216.26.251.76: 1 in the last 86400 secs; Ports: ...
show more
(mod_security) mod_security (id:900001) triggered by 216.26.251.76: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 18:35:34.670396 2026] [security2:error] [pid 351315:tid 351435] [client 216.26.251.76:23673] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.pankoskal.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.pankoskal.gr"] [uri "/wp-login.php"] [unique_id "aiwnRi1k1uOF-ho73AcRjgAAABQ"], referer: https://mail.pankoskal.gr/wp-login.php
show less
Port Scan
🇫🇷
pm33
2026-06-12 14:08:20
(2 days ago)
Wordpress login attempts
Brute-Force
🇬🇧
spamverify.com
2026-06-12 04:10:55
(3 days ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-06-12 01:01:17
(3 days ago)
(mod_security) mod_security (id:900001) triggered by 216.26.251.76: 1 in the last 86400 secs; Ports: ...
show more
(mod_security) mod_security (id:900001) triggered by 216.26.251.76: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 12 04:01:16.848555 2026] [security2:error] [pid 52863:tid 53036] [client 216.26.251.76:63557] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: tavernadimitris.com"] [severity "CRITICAL"] [tag "security"] [hostname "tavernadimitris.com"] [uri "/wp-login.php"] [unique_id "aitaXBJWFl-XeyyYvI7AUAAAAM8"], referer: https://tavernadimitris.com/wp-login.php
show less
Port Scan
🇺🇸
lostswordfish.com
2026-06-11 18:34:04
(3 days ago)
Wordfence waf block on pameganslaw
Web App Attack
🇲🇽
octageeks.com
2026-06-11 04:12:32
(4 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
pm33
2026-06-10 16:22:30
(4 days ago)
Wordpress login attempts
Brute-Force
2026-05-16 19:05:14
(4 weeks ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-01-13 04:05:28
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 23:05:21.866411 2026] [security2:error] [pid 3067713:tid 3067846] [client 216.26.251.76:17919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dukesandgannon.com"] [uri "/.git/HEAD"] [unique_id "aWXEgbApHTagK-6R_SjH3gAAAgE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-12-09 04:47:38
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from CA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-24 09:20:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:19:59.781059 2025] [security2:error] [pid 17699:tid 17699] [client 216.26.251.76:40431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.baughman.org"] [uri "/.git/HEAD"] [unique_id "aSQjP3KselmEhh71i200-gAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:02:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:02:47.290249 2025] [security2:error] [pid 31309:tid 31309] [client 216.26.251.76:9695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rosetina.com"] [uri "/.git/HEAD"] [unique_id "aSQfN8kYBQq2ya3M_mORxAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:23:23
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:23:04.063339 2025] [security2:error] [pid 3465547:tid 3465547] [client 216.26.251.76:17677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.newcitypark.com"] [uri "/.env"] [unique_id "aSQH2GimZ6lDlKBzOZAhugAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:35:37
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.251.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:35:31.017096 2025] [security2:error] [pid 26895:tid 26895] [client 216.26.251.76:48897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.itecsis.com"] [uri "/.svn/wc.db"] [unique_id "aSPuo9QvG0mQ-sDzXLFv3AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack