163.7.16.143

Web app exploiting

WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies

2026-11-01T00:38:03 163.7.16.143 GET /Photos/Vacation/2022-06-9%20Road%20Trip/raw/DSC05220.ARW Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 ...

2026-10-29T11:27:05 163.7.16.143 GET /Photos/Vacation/2023-11-26%20Kauai/raw/DSC06418.ARW Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 ...

2026-10-23T03:45:37 163.7.16.143 GET /Photos/Vacation/2012-11-22%20Hwy%20108/raw/IMG_0683.CR2.xmp Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 ...

This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no b ... show more This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no browser is behind them. Each participating address sends only one or two such requests, but we count them by the million: a botnet, compromised devices, or abused proxies. The address is blocked. An investigation into what exactly sends these requests from your network (malware, an open proxy, a rented device) would help stop the attack at its source. | path: /89-vtt-loisir-sportif | query: order=product.reference.desc&q=Taille-M-XXL | 2026-09-26 04:21 UTC show less

WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies

2026-09-12T07:05:48.828586+00:00 www.diamondaviators.net throttler[778]: Throttle IP 163.7.16.143 with 25 denials ...

Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-08T09:37:02Z.

Blocked abusive HTTP application-layer DoS / botnet traffic from 163.7.16.143: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.

WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies

WEB attack

SmallGuard.fr/Prestashop Massive 403

WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies

Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected