🇳🇱
donarev419
2026-05-15 02:38:24
(1 month ago)
Connection to port 8043 with data transfer.
Data preview:
Port Scan
Hacking
🇬🇧
Oakley
2026-05-13 19:07:14
(1 month ago)
(mod_security) mod_security (id:900210) triggered by 140.235.0.241 (US/United States/-): 2 in the la ...
show more
(mod_security) mod_security (id:900210) triggered by 140.235.0.241 (US/United States/-): 2 in the last 900 secs
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-04-30 11:33:08
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 140.235.0.241 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 140.235.0.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 07:32:58.977058 2026] [security2:error] [pid 27002:tid 27002] [client 140.235.0.241:15213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||technesa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "technesa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afM96gj0pHus3TgZs9NF3gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 17:09:10
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 140.235.0.241 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 140.235.0.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 13:08:54.242443 2026] [security2:error] [pid 14095:tid 14238] [client 140.235.0.241:15491] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||maryschalkdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maryschalkdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afDppjFIR5KO3GP5HBfXeQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-17 22:41:19
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 140.235.0.241 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 140.235.0.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 18:41:12.467265 2026] [security2:error] [pid 401986:tid 401986] [client 140.235.0.241:57345] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.zezel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.zezel.com"] [uri "/wp-login.php/wp-json/wp/v2/users"] [unique_id "aeK3CE2iJg3N24BPwF-VGwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-03-23 03:21:07
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-21.140.235.0.241.web-spamme ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-21.140.235.0.241.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
2026-03-10 03:27:40
(3 months ago)
Forum/form spam
Web Spam
🇺🇸
webgobe
2026-01-31 09:50:31
(4 months ago)
jow-Joomla User : try to access forms...
Hacking
2026-01-26 10:00:00
(4 months ago)
Vpn Brute Force
Brute-Force
Bad Web Bot
2026-01-19 23:37:01
(5 months ago)
Forum/form spam
Web Spam
🇫🇷
masterguru
2025-12-23 11:04:20
(5 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.0.241 (US/United States/-): 1 in the l ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 140.235.0.241 (US/United States/-): 1 in the last 3600 secs (0-197)
show less
Hacking
🇺🇸
webgobe
2025-12-13 10:06:09
(6 months ago)
jow-Joomla User : try to access forms...
Hacking
2025-12-09 01:38:42
(6 months ago)
multiple unauthorized attempts at Sat, 06 Dec 2025 01:07:40 +0000 a total of 1 times.
Brute-Force
2025-12-07 08:33:48
(6 months ago)
Forum/form spam
Web Spam
2025-10-21 16:55:02
(8 months ago)
Forum/form spam
Web Spam