🇧🇷
ICS Labs
2026-05-12 01:20:44
(1 month ago)
ICS Labs identified 157.66.56.19 as a malicious indicator from threat intelligence.
Hacking
🇮🇩
David Koswari
2026-05-04 05:52:00
(1 month ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇫🇷
solution.it
2026-05-03 21:57:46
(1 month ago)
[Sun May 03 23:57:45.745541 2026] [php7:error] [pid 652795:tid 652795] [client 157.66.56.19:65425] s ...
show more
[Sun May 03 23:57:45.745541 2026] [php7:error] [pid 652795:tid 652795] [client 157.66.56.19:65425] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
show less
Web App Attack
🇺🇸
mawan
2026-05-03 17:09:52
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
mind5t0rm
2026-05-03 13:20:04
(1 month ago)
(WPLOGIN) WP Login Attack 157.66.56.19 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: *; Directio ...
show more
(WPLOGIN) WP Login Attack 157.66.56.19 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 157.66.56.19 - - [03/May/2026:20:19:55 +0700] "GET /wp-login.php HTTP/2.0" 200 3118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
157.66.56.19 - - [03/May/2026:20:19:57 +0700] "POST /wp-login.php HTTP/2.0" 200 3280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
157.66.56.19 - - [03/May/2026:20:19:59 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zerowaterthailand.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 3122 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Port Scan
🇹🇭
MWA SOC
2026-05-03 10:35:09
(1 month ago)
Hacking
🇺🇸
mind5t0rm
2026-05-03 09:16:31
(1 month ago)
(WPLOGIN) WP Login Attack 157.66.56.19 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: *; Directio ...
show more
(WPLOGIN) WP Login Attack 157.66.56.19 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 157.66.56.19 - - [03/May/2026:16:16:18 +0700] "GET /wp-login.php HTTP/2.0" 200 3114 "-" "Mozila/5.0"
157.66.56.19 - - [03/May/2026:16:16:22 +0700] "POST /wp-login.php HTTP/2.0" 200 3279 "-" "Mozila/5.0"
157.66.56.19 - - [03/May/2026:16:16:25 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zerowaterthailand.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 3119 "-" "Mozila/5.0"
show less
Port Scan
🇹🇷
baku.hosting
2026-05-03 00:31:32
(1 month ago)
CSF Auto Report: (cpanel) Failed cPanel login from 157.66.56.19 (ID/Indonesia/-): 4 in the last 3600 ...
show more
CSF Auto Report: (cpanel) Failed cPanel login from 157.66.56.19 (ID/Indonesia/-): 4 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇫🇷
tilellit.pro
2026-05-02 21:54:10
(1 month ago)
Fail2Ban banned 157.66.56.19 for security violations in jail wp-armour. Log: 2026/05/02 21:54:09 [er ...
show more
Fail2Ban banned 157.66.56.19 for security violations in jail wp-armour. Log: 2026/05/02 21:54:09 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.66.56.19 | Target: wplogin" , client: 157.66.56.19, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED]
...
show less
Web Spam
🇺🇸
mind5t0rm
2026-05-02 14:20:16
(1 month ago)
(WPLOGIN) WP Login Attack 157.66.56.19 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: *; Directio ...
show more
(WPLOGIN) WP Login Attack 157.66.56.19 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 157.66.56.19 - - [02/May/2026:21:20:10 +0700] "GET /wp-login.php HTTP/2.0" 200 3117 "-" "Mozila/5.0"
157.66.56.19 - - [02/May/2026:21:20:12 +0700] "POST /wp-login.php HTTP/2.0" 200 3282 "-" "Mozila/5.0"
157.66.56.19 - - [02/May/2026:21:20:14 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zerowaterthailand.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 3123 "-" "Mozila/5.0"
show less
Port Scan
🇫🇷
tilellit.pro
2026-05-02 13:33:18
(1 month ago)
Fail2Ban banned 157.66.56.19 for security violations in jail wp-armour. Log: 2026/05/02 13:33:18 [er ...
show more
Fail2Ban banned 157.66.56.19 for security violations in jail wp-armour. Log: 2026/05/02 13:33:18 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.66.56.19 | Target: wplogin" , client: 157.66.56.19, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED]
...
show less
Web Spam
🇺🇸
mind5t0rm
2026-05-02 10:37:07
(1 month ago)
(WPLOGIN) WP Login Attack 157.66.56.19 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: *; Directio ...
show more
(WPLOGIN) WP Login Attack 157.66.56.19 (ID/Indonesia/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 157.66.56.19 - - [02/May/2026:17:36:56 +0700] "GET /wp-login.php HTTP/2.0" 200 3118 "-" "Mozila/5.0"
157.66.56.19 - - [02/May/2026:17:36:57 +0700] "POST /wp-login.php HTTP/2.0" 200 3282 "-" "Mozila/5.0"
157.66.56.19 - - [02/May/2026:17:37:02 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zerowaterthailand.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 3123 "-" "Mozila/5.0"
show less
Port Scan
🇫🇷
solution.it
2026-05-01 23:56:50
(1 month ago)
[Sat May 02 01:56:50.064589 2026] [php7:error] [pid 139052:tid 139052] [client 157.66.56.19:54011] s ...
show more
[Sat May 02 01:56:50.064589 2026] [php7:error] [pid 139052:tid 139052] [client 157.66.56.19:54011] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
show less
Web App Attack
🇮🇩
zam
2026-05-01 19:37:05
(1 month ago)
157.66.56.19 - - [01/May/2026:19:37:03 +0000] "GET /local/moodle_webshell/webshell.php?action=exec\u ...
show more
157.66.56.19 - - [01/May/2026:19:37:03 +0000] "GET /local/moodle_webshell/webshell.php?action=exec\u0026cmd=id HTTP/1.1" 301 334
show less
Web App Attack
🇺🇸
mawan
2026-05-01 18:11:34
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack