🇳🇱
wlt-blocker
2026-10-28 17:56:26
(4 hours ago)
Attempts to login to mail server with wrong username and/or password
Brute-Force
🇺🇸
HJ5Ss4Ju
2026-10-27 13:17:40
(1 day ago)
Wordfence firewall block
Web App Attack
🇺🇸
mawan
2026-10-25 02:12:42
(3 days ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇫🇷
LRob
2026-10-24 23:57:22
(3 days ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
Bad Web Bot
2026-10-24 09:11:37
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-23 10:14:19
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:14:14.989690 2026] [security2:error] [pid 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:14:14.989690 2026] [security2:error] [pid 32335:tid 32335] [client 108.80.146.241:42756] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thenolangroup.llc|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thenolangroup.llc"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atszduwxug8xB0VPCJySvwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 22:43:09
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 18:43:03.881350 2026] [security2:error] [pid 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 18:43:03.881350 2026] [security2:error] [pid 30973:tid 30973] [client 108.80.146.241:34090] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.oldsite.soudertonbigred.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.oldsite.soudertonbigred.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atqRd-sRtRP17MJDw0wvQQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 15:32:08
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:32:02.870613 2026] [security2:error] [pid 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:32:02.870613 2026] [security2:error] [pid 15494:tid 15494] [client 108.80.146.241:53856] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||broneksuchanek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "broneksuchanek.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "atoscg1alcEIo14kWribcwAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
wpadm3
2026-10-22 14:01:56
(6 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-10-22 03:40:38
(6 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
mnsf
2026-10-21 09:05:12
(1 week ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇲🇹
Malta
2026-10-18 07:19:12
(1 week ago)
108.80.146.241 - - [18/Oct/2026:09:19:12 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-10-15 06:29:58
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 02:29:52.905023 2026] [security2:error] [pid 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 02:29:52.905023 2026] [security2:error] [pid 30106:tid 30106] [client 108.80.146.241:51444] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||modestosoftwater.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modestosoftwater.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atBy4PpE7Sb_be3C4Fjc9QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-15 03:06:28
(1 week ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 03:25:39
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:25:33.945078 2026] [security2:error] [pid 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 108.80.146.241 (108-80-146-241.lightspeed.clmboh.sbcglobal.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:25:33.945078 2026] [security2:error] [pid 19146:tid 19146] [client 108.80.146.241:34604] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oruhu.org.circulodesonido.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oruhu.org.circulodesonido.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "assBrXuWW85NYfTRpxu9ewAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
