🇩🇪
H. Hampel
2026-08-28 16:56:10
(3 days ago)
Spam.
Email Spam
🇺🇸
TPI-Abuse
2026-08-25 14:38:04
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 10:37:56.985145 2026] [security2:error] [pid 16452:tid 16481] [client 54.37.196.177:48699] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.teritemme.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.teritemme.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ao2oxNM53nctuED6UBDO2AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DocNetzwerk
2026-08-04 18:59:59
(3 weeks ago)
(smtp-25-to-rcpt-from-2007-leak) Recipient address has been leaked in 2007 54.37.196.177 (DE/Germany ...
show more
(smtp-25-to-rcpt-from-2007-leak) Recipient address has been leaked in 2007 54.37.196.177 (DE/Germany/5437196177.aitechnearme.com)
show less
Hacking
🇵🇱
TheWojtek
2026-07-09 07:47:10
(1 month ago)
Jul 9 09:47:09 hq postfix/smtpd[3036667]: NOQUEUE: reject: RCPT from 5437196177.aitechnearme.com[54 ...
show more
Jul 9 09:47:09 hq postfix/smtpd[3036667]: NOQUEUE: reject: RCPT from 5437196177.aitechnearme.com[54.37.196.177]: 554 5.7.1 Service unavailable; Client host [54.37.196.177] blocked using Guardian Mail; https://lookup.abusix.com/search?q=54.37.196.177; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<5437196177.aitechnearme.com>
...
show less
Email Spam
🇪🇸
didevi
2026-04-02 14:19:10
(4 months ago)
SPAM or Brute force attack detected
Email Spam
Brute-Force
2026-03-08 15:51:15
(5 months ago)
spam
Email Spam
2025-12-10 04:01:41
(8 months ago)
TRAPPED EMAIL 54.37.196.177 (5437196177.aitechnearme.com)
Email Spam
🇩🇪
WhiteShark
2025-08-29 08:49:04
(1 year ago)
aitechnearme.com blocked due to abusive behavior
Email Spam
🇺🇸
TPI-Abuse
2025-08-20 22:47:12
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 20 18:47:07.016668 2025] [security2:error] [pid 18779:tid 18779] [client 54.37.196.177:13765] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.steinrauffamilylaw.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.steinrauffamilylaw.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aKZQa9hcxO3ZGRCM6S1khAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
DiodeDave
2025-08-17 07:02:11
(1 year ago)
Attempted access after blacklisting
Email Spam
🇺🇸
TPI-Abuse
2025-08-04 19:08:28
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 04 15:08:22.513423 2025] [security2:error] [pid 14369:tid 14369] [client 54.37.196.177:13471] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.cgiaquaticcare.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.cgiaquaticcare.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aJEFJi8dHRWUg_AqFpl8iwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-23 03:50:51
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 22 23:50:45.560226 2025] [security2:error] [pid 11297:tid 11297] [client 54.37.196.177:24021] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.clossglobal.com|F|2"] [data "[email protected] "] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.clossglobal.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aIBcFeyJdtQCv4Hd3hqK3QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-22 15:20:07
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 22 11:19:58.226925 2025] [security2:error] [pid 2068:tid 2068] [client 54.37.196.177:41919] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.mchen-arch.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.mchen-arch.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aH-sHuSuSkyEtW9cAzJFoAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-03 21:17:05
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 03 17:16:59.471934 2025] [security2:error] [pid 26163:tid 26163] [client 54.37.196.177:23557] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.alianzallc.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.alianzallc.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aGbzS8DGNn0kXIUh03gXngAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-17 01:47:08
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 54.37.196.177 (5437196177.aitechnearme.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 16 21:47:05.105868 2025] [security2:error] [pid 2153412:tid 2153412] [client 54.37.196.177:63339] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.nwtree.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.nwtree.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aFDJGRtphCjLwgt9t53hMwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack