This IP address has been reported a total of
9
times from
8 distinct
sources.
49.37.41.165 was first reported on
August 24th 2021 , and the most recent report was
4 days ago Colombia
with 1
report.
The only category in these recent reports was:
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-05 15:55:04
(4 days ago)
Brute Force User Attack SMTP
Brute-Force
🇳🇱
exxos
2025-09-22 19:05:31
(1 year ago)
Attacks with Bad user agents
Hacking
2025-09-19 19:17:32
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-09-19 18:22:57
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 49.37.41.165 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 49.37.41.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 14:22:49.871394 2025] [security2:error] [pid 5995:tid 5995] [client 49.37.41.165:58429] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||forerunnersjazz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "forerunnersjazz.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aM2feZMwilkfXI7S_7deqgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-17 18:34:37
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 49.37.41.165 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 49.37.41.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 14:34:24.772737 2025] [security2:error] [pid 31914:tid 31914] [client 49.37.41.165:60974] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||saynotoofland.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "saynotoofland.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aMr_MHjq9r1hWDl8l3lwLQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-03-23 02:03:00
(3 years ago)
"Illegal file type"
Brute-Force
🇪🇸
10dencehispahard SL
2022-12-27 19:01:30
(3 years ago)
Unauthorized login attempts [ wordpress-xmlrpc, wordpress]
Brute-Force
Web App Attack
2022-11-21 10:31:25
(3 years ago)
Nov 21 16:31:24 ns3130050 postfix/smtpd[27020]: warning: unknown[49.37.41.165]: SASL PLAIN authentic ...
show more
Nov 21 16:31:24 ns3130050 postfix/smtpd[27020]: warning: unknown[49.37.41.165]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
Web App Attack
🇷🇴
eddy.ro
2021-08-24 05:07:14
(5 years ago)
$f2bV_matches
Brute-Force
SSH
Showing 1 to
9
of 9 reports
