๐บ๐ธ
TPI-Abuse
2026-10-26 16:40:58
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiant ...
show more
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiantel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:40:50.737741 2026] [security2:error] [pid 24643:tid 24643] [client 141.239.241.102:46098] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lumentravel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lumentravel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "at-CknAE7zDjyx4r4tzK_gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐น
Malta
2026-10-26 04:09:28
(14 hours ago)
141.239.241.102 - - [26/Oct/2026:05:09:28 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macinto ...
show more
141.239.241.102 - - [26/Oct/2026:05:09:28 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
๐บ๐ธ
lostswordfish.com
2026-10-25 21:56:04
(20 hours ago)
Wordfence waf block on registrymatters
Web App Attack
๐ฒ๐น
Malta
2026-10-24 16:57:47
(2 days ago)
141.239.241.102 - - [24/Oct/2026:18:57:47 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Li ...
show more
141.239.241.102 - - [24/Oct/2026:18:57:47 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
๐ฉ๐ช
stinpriza
2026-10-24 09:34:26
(2 days ago)
Web App Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 05:34:34
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiant ...
show more
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiantel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 01:34:27.536717 2026] [security2:error] [pid 20885:tid 20885] [client 141.239.241.102:40954] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pixelspective.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixelspective.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atmgY64LJYKeWhNdCdOrlgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-21 08:35:18
(5 days ago)
141.239.241.102 (US/United States/Hawaii/Honolulu/dhcp-141-239-241-102.hawaiiantel.net/[redacted]
Brute-Force
๐จ๐ญ
Ribeye375
2026-10-21 08:27:27
(5 days ago)
HIPS wordpress - Block tcp/0:65535
Web App Attack
๐ฉ๐ช
LRob
2026-10-20 16:32:46
(6 days ago)
Not following 301 redirects โ wasted requests | host: meteo-centre-val-de-loire.fr | method: POST | ...
show more
Not following 301 redirects โ wasted requests | host: meteo-centre-val-de-loire.fr | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 | src_port: 34848 | 2026-10-20 16:32 UTC
show less
Bad Web Bot
๐ซ๐ท
LRob
2026-10-19 19:10:54
(6 days ago)
Not following 301 redirects โ wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 ...
show more
Not following 301 redirects โ wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-17 10:30:52
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiant ...
show more
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiantel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:30:46.718075 2026] [security2:error] [pid 29226:tid 29226] [client 141.239.241.102:37244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.soundtrax.net"] [uri "/wp-json/wp/v2/users"] [unique_id "atNOVlCynnfh880gkHgNYAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 04:15:53
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiant ...
show more
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiantel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:15:48.030261 2026] [security2:error] [pid 7772:tid 7772] [client 141.239.241.102:46266] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.riedmannfamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.riedmannfamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atBTdFWabKI8AddSnieoeQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-10-15 00:09:31
(1 week ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 15:34:15
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiant ...
show more
(mod_security) mod_security (id:225170) triggered by 141.239.241.102 (dhcp-141-239-241-102.hawaiiantel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 11:34:09.122597 2026] [security2:error] [pid 12642:tid 12642] [client 141.239.241.102:34184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aroilcontrolsystem.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aroilcontrolsystem.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as-g8RtxFHhvkFXuyyKUswAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-10-11 22:48:33
(2 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack