This IP address has been reported a total of
18
times from
16 distinct
sources.
165.73.163.152 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Hungary
with 1
report.
The most common categories in these recent reports were:
Brute-Force
3
times;
Web App Attack
2
times;
Exploited Host
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[FriOct2307:43:52.1688882026][security2:error][pid2184067:tid2184115][client165.73.163.152:0]ModSecu ...
show more[FriOct2307:43:52.1688882026][security2:error][pid2184067:tid2184115][client165.73.163.152:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"restaurantgandria.ch\"][uri\"/wp-login.php\"][unique_id\"atr0GClahQXNTHe43lIiOgAAAE4\"]\,referer:https://restaurantgandria.ch/wp-login.php
show less
(wordpress) Failed wordpress login from 165.73.163.152 (ZA/South Africa/Eastern Cape/East London/-/[ ...
show more(wordpress) Failed wordpress login from 165.73.163.152 (ZA/South Africa/Eastern Cape/East London/-/[redacted]): (CF_ENABLE)
show less
UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 80/8443 across 35 dst IP(s), 2026-08-19 21:46 ...
show moreUDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 80/8443 across 35 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 80/8443 across 35 dst IP(s), 2026-08-19 21:46 ...
show moreUDP flood (DDoS) vs AS215599: 40 pkts / 0.06 MB to UDP 80/8443 across 35 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
DDoS Attack
Exploited Host
Anonymous
denied traffic to a honeypot network. destination port 29965.
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ...
show moreBnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
165.73.163.152 443 - [16/Aug/2026:04:33:51 +0000] "GET [redacted] HTTP/1.1" 200 7029 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
03/10/2026-19:27:33.219130 [Drop] [**] [1:9200018:0] match JA4 hash Microsoft oai-searchbot openai. ...
show more03/10/2026-19:27:33.219130 [Drop] [**] [1:9200018:0] match JA4 hash Microsoft oai-searchbot openai.com 74-7-241-181 [**] [Classification: (null)] [Priority: 3] {TCP} 165.73.163.152:57282 -> 103.166.156.58:443
...
show less
