🇺🇸
TPI-Abuse
2026-11-12 18:07:50
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 165.16.171.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:07:45.376133 2026] [security2:error] [pid 2580:tid 2580] [client 165.16.171.37:26900] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 165.16.171.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:07:45.376133 2026] [security2:error] [pid 2580:tid 2580] [client 165.16.171.37:26900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||naturalacu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "naturalacu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avYAcb8qWlfQ46l86LEIwQAAAAs"], referer: https://naturalacu.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 03:03:26
UTC ·
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 165.16.171.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:03:20.302627 2026] [security2:error] [pid 28769:tid 28769] [client 165.16.171.37:26325] M ...
show more
(mod_security) mod_security (id:225170) triggered by 165.16.171.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:03:20.302627 2026] [security2:error] [pid 28769:tid 28769] [client 165.16.171.37:26325] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bundrenfarmstn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bundrenfarmstn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avPa-Cw1Xa7Tc1jDIoaaygAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Mugen
2026-11-10 00:59:28
UTC ·
(5 days ago)
Unauthorized VPN login attempts
Brute-Force
🇨🇿
Countryman
2026-11-05 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-11-03 08:03:03
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 165.16.171.37
2026-11-03T08:50:37+0100 vpn Access-Reject station: 165.16.171.37
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-10-30 01:10:02
UTC ·
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇫🇮
paissangroup
2026-10-29 22:42:12
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 09:45:06
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 165.16.171.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 05:45:01.171699 2026] [security2:error] [pid 14308:tid 14308] [client 165.16.171.37:26040] M ...
show more
(mod_security) mod_security (id:225170) triggered by 165.16.171.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 05:45:01.171699 2026] [security2:error] [pid 14308:tid 14308] [client 165.16.171.37:26040] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||415test.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "415test.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atiJneI-6CZWfYm-BgfFGQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
security.rdmc.fr
2026-10-06 18:53:09
UTC ·
(1 month ago)
Port Scan Attack proto:TCP src:4939 dst:23
Port Scan
🇺🇸
鬼影233
2026-10-01 16:07:09
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-30 08:11:09
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇩🇪
_ArminS_
2026-09-27 05:55:42
UTC ·
(1 month ago)
Bad SSHAUTH 2026.09.27 07:55:42
blocked until 2026.09.30 07:55:42
by HoneyPot DE_State of Berlin01
SSH
Brute-Force
Hacking
🇸🇬
garrymenata
2026-08-23 19:06:46
UTC ·
(2 months ago)
165.16.171.37 - - [24/Aug/2026:00:56:23 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
165.16.171.37 - - [24/Aug/2026:00:56:24 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; ...
show more
165.16.171.37 - - [24/Aug/2026:00:56:23 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
165.16.171.37 - - [24/Aug/2026:00:56:24 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
165.16.171.37 - - [24/Aug/2026:00:56:27 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)"
...
show less
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-08-01 08:25:52
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
filstal.org
2026-04-27 12:34:03
UTC ·
(6 months ago)
Bad web bot: Spoofed/obsolete UA (Opera/9.79.(Windows 98; kok-IN) Presto/2.9.173 Version/10.00). Mass-scanning WordPress plugin. Coordinated large-scale bot attack.
Bad Web Bot
Web App Attack
