🇺🇸
TPI-Abuse
2026-06-15 12:54:46
(1 hour ago)
(mod_security) mod_security (id:240335) triggered by 217.150.82.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 217.150.82.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 08:54:40.391846 2026] [security2:error] [pid 12546:tid 12546] [client 217.150.82.136:54457] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.150.82.136 (+1 hits since last alert)|flatchestedmama.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "flatchestedmama.com"] [uri "/xmlrpc.php"] [unique_id "ai_2ECp8uMjYMMawsJzciwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-06-08 12:06:40
(1 week ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security
DDoS Attack
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-08 08:02:09
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 217.150.82.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 217.150.82.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 04:02:04.778251 2026] [security2:error] [pid 26271:tid 26271] [client 217.150.82.136:60366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.150.82.136 (+1 hits since last alert)|portlunchgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "portlunchgroup.com"] [uri "/xmlrpc.php"] [unique_id "aiZ2_MGI93BnVSHnneP7_AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-06-08 07:35:53
(1 week ago)
(wordpress) Failed wordpress login from 217.150.82.136 (LB/Lebanon/-)
Brute-Force
2026-06-04 14:20:46
(1 week ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-04 13:50:32
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 217.150.82.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 217.150.82.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 09:50:28.531340 2026] [security2:error] [pid 21362:tid 21362] [client 217.150.82.136:60052] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.150.82.136 (+1 hits since last alert)|fishleadership.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fishleadership.org"] [uri "/xmlrpc.php"] [unique_id "aiGCpIYNawlOtv6Y3af7AgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-06-01 08:14:34
(2 weeks ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇩🇪
SMARTNET
2026-05-27 06:03:53
(2 weeks ago)
Aisuru(Mirai variant) DDoS | Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d
DDoS Attack
2026-05-18 15:52:20
(3 weeks ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-04-25 10:11:53
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 217.150.82.136 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 217.150.82.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 06:11:46.374088 2026] [security2:error] [pid 25811:tid 25811] [client 217.150.82.136:58659] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.150.82.136 (+1 hits since last alert)|rocksolidhomebuilders.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rocksolidhomebuilders.com"] [uri "/xmlrpc.php"] [unique_id "aeyTYj5WCZaCB1R4KbjDFAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-04-22 22:09:10
(1 month ago)
(wordpress) Failed wordpress login from 217.150.82.136 (LB/Lebanon/-)
Brute-Force
🇺🇸
stechusa
2026-03-21 15:18:43
(2 months ago)
[Askari] | Signals:
Web App Attack
Hacking
Web Spam
🇺🇸
stechusa
2026-03-21 14:10:19
(2 months ago)
[Askari] ELEVATED_THREAT | 408 IPs targeting /brand.html | URL template shared by 119 IPs: /brand.ht ...
show more
[Askari] ELEVATED_THREAT | 408 IPs targeting /brand.html | URL template shared by 119 IPs: /brand.html?bulb_shape=*&bulb_shape_type=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=0.90, unique_ips=724) | Signals: facet_param_template, concurrent_facet_load, path_concentration, outdated_user_agent, recv_q_stall
show less
Web App Attack
Hacking
Web Spam
🇺🇸
stechusa
2026-03-21 14:10:19
(2 months ago)
ELEVATED_THREAT | 408 IPs targeting /brand.html | URL template shared by 119 IPs: /brand.html?bulb_s ...
show more
ELEVATED_THREAT | 408 IPs targeting /brand.html | URL template shared by 119 IPs: /brand.html?bulb_shape=*&bulb_shape_type=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=0.90, unique_ips=724)
show less
Web App Attack
Hacking
Web Spam
🇱🇻
garmtech.com
2026-03-20 08:05:16
(2 months ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection