🇬🇷
setupgr
2026-06-11 20:08:10
(2 hours ago)
(mod_security) mod_security (id:900001) triggered by 94.26.106.23: 1 in the last 86400 secs; Ports: ...
show more
(mod_security) mod_security (id:900001) triggered by 94.26.106.23: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 11 23:08:06.628975 2026] [security2:error] [pid 2152061:tid 2152236] [client 94.26.106.23:57904] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|alloweddomain2\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: villa-izabela.com"] [severity "CRITICAL"] [tag "security"] [hostname "villa-izabela.com"] [uri "/wp-login.php"] [unique_id "aisVpr6g179B6nG0Xi43BwAAAQI"]
show less
Port Scan
2026-06-11 17:02:03
(5 hours ago)
94.26.106.23 - - [11/Jun/2026:14:02:01 -0300] "GET /wp-login.php HTTP/1.1" 404 1185 "https://t.co/" ...
show more
94.26.106.23 - - [11/Jun/2026:14:02:01 -0300] "GET /wp-login.php HTTP/1.1" 404 1185 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
94.26.106.23 - - [11/Jun/2026:14:02:02 -0300] "GET /wp-login.php HTTP/1.1" 404 1185 "https://wordpress.org/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
94.26.106.23 - - [11/Jun/2026:14:02:02 -0300] "GET /wp-admin/ HTTP/1.1" 403 1179 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0"
...
show less
Port Scan
🇲🇾
Rizzy
2026-06-11 09:49:42
(12 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
Holger
2026-06-11 09:28:36
(13 hours ago)
WordPress WebAttack
Brute-Force
Web App Attack
🇸🇬
abuseipreport.darajati
2026-06-11 06:54:44
(15 hours ago)
94.26.106.23 - - [2026-06-11T14:54:41+08:00] "POST /wp-login.php HTTP/1.1" 200 2111 "https://hestiai ...
show more
94.26.106.23 - - [2026-06-11T14:54:41+08:00] "POST /wp-login.php HTTP/1.1" 200 2111 "https://hestiaistiviani.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
94.26.106.23 - - [2026-06-11T14:54:42+08:00] "POST /wp-login.php HTTP/1.1" 200 2112 "https://hestiaistiviani.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
94.26.106.23 - - [2026-06-11T14:54:42+08:00] "POST /wp-login.php HTTP/1.1" 200 2112 "https://hestiaistiviani.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
94.26.106.23 - - [2026-06-11T14:54:43+08:00] "POST /wp-login.php HTTP/1.1" 200 2107 "https://hestiaistiviani.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
...
show less
Web App Attack
🇸🇬
abuseipreport.darajati
2026-06-11 05:54:23
(16 hours ago)
94.26.106.23 - - [2026-06-11T13:54:19+08:00] "POST /wp-login.php HTTP/1.1" 200 2107 "https://hestiai ...
show more
94.26.106.23 - - [2026-06-11T13:54:19+08:00] "POST /wp-login.php HTTP/1.1" 200 2107 "https://hestiaistiviani.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
94.26.106.23 - - [2026-06-11T13:54:20+08:00] "POST /wp-login.php HTTP/1.1" 200 2107 "https://hestiaistiviani.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
94.26.106.23 - - [2026-06-11T13:54:20+08:00] "POST /wp-login.php HTTP/1.1" 200 2107 "https://hestiaistiviani.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0"
94.26.106.23 - - [2026-06-11T13:54:21+08:00] "POST /wp-login.php HTTP/1.1" 200 2109 "https://hestiaistiviani.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
94.26.106.23 - - [2026-06-11T13:54:22+08:00] "POST /w
...
show less
Web App Attack
🇺🇸
lnklnx
2026-06-10 15:10:29
(1 day ago)
www.lincolnclan.com:443 94.26.106.23 - - [10/Jun/2026:10:10:26 -0500] "GET /wp-login.php HTTP/1.1" 4 ...
show more
www.lincolnclan.com:443 94.26.106.23 - - [10/Jun/2026:10:10:26 -0500] "GET /wp-login.php HTTP/1.1" 401 4143 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
Web App Attack
2026-06-10 05:03:05
(1 day ago)
Banned by fail2ban (apache-admin-ban) - web attack. Evidence:
Web App Attack
2026-06-10 02:42:43
(1 day ago)
Aggressive Robot or Attack DDOS
DDoS Attack
🇬🇧
andypiper
2026-06-10 01:03:04
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
2026-06-10 00:11:10
(1 day ago)
Attac
Brute-Force
🇫🇷
SpaceHost-Server
2026-06-09 22:31:29
(2 days ago)
Brute-Force
Web App Attack
🇫🇷
Baking333
2026-06-09 20:05:39
(2 days ago)
[redacted] 94.26.106.23 - - [09/Jun/2026:21:05:38 +0100] "GET /[redacted] HTTP/1.1" 302 5293 0/90936 ...
show more
[redacted] 94.26.106.23 - - [09/Jun/2026:21:05:38 +0100] "GET /[redacted] HTTP/1.1" 302 5293 0/90936 "https://[redacted]/search?q=wordpress" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" [redacted] 94.26.106.23 - - [09/Jun/2026:21:05:38 +0100] "GET / HTTP/1.1" 200 11978 0/109606 "https://[redacted]/search?q=wordpress" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
2026-06-09 17:00:33
(2 days ago)
Aggressive web scan
Web App Attack
🇨🇦
zXero
2026-06-09 13:03:30
(2 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack