🇺🇸
analysisphishing
2026-04-05 12:15:17
(2 months ago)
We report cloaking techniques being used to target "Pusulabet" through the malicious resource: https ...
show more
We report cloaking techniques being used to target "Pusulabet" through the malicious resource: https://skyheightsacademy1.com. The attackers serve benign content to scanners and automated crawlers, while delivering fraudulent phishing pages to real users. This evasion allows the abuse to remain undetected while stealing user credentials.
Such practices constitute deception, brand infringement, and a violation of intellectual property and cybersecurity laws. They directly harm our users by enabling identity theft and account compromise.
We request AbuseIPDB’s assistance in investigating and mitigating this unlawful activity.
Best regards,
Brand Protection Officer
Pusulabet Legal Team
show less
Phishing
Hacking
Web App Attack
🇸🇪
webbfabriken
2025-09-08 10:50:06
(9 months ago)
Invalid WordPress login attempt
Attack reported by Webbfabiken Security API - WFSecAPI
Brute-Force
🇳🇱
Mangelot Hosting
2025-09-08 10:02:16
(9 months ago)
(PERMBLOCK) 66.147.230.55 (US/United States/lotus.hostnownow.com) has had more than 4 temp blocks in ...
show more
(PERMBLOCK) 66.147.230.55 (US/United States/lotus.hostnownow.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
🇦🇺
screwlooseit.com.au
2025-09-08 09:16:53
(9 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
US/United States/lotus.hostnownow.com
Web App Attack
🇬🇧
Mendip_Defender
2025-09-08 08:56:00
(9 months ago)
66.147.230.55 - - [08/Sep/2025:09:02:09 +0100] "GET /wp-login.php HTTP/1.0" 404 48241 "-" "Mozilla/5 ...
show more
66.147.230.55 - - [08/Sep/2025:09:02:09 +0100] "GET /wp-login.php HTTP/1.0" 404 48241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
66.147.230.55 - - [08/Sep/2025:09:44:06 +0100] "GET /wp-login.php HTTP/1.0" 404 48241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
66.147.230.55 - - [08/Sep/2025:09:55:39 +0100] "GET /wp-login.php HTTP/1.0" 404 48241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
2025-09-08 08:42:56
(9 months ago)
[Mon Sep 08 10:42:55.543029 2025] [authz_core:error] [pid 122842:tid 123011] [client 66.147.230.55:5 ...
show more
[Mon Sep 08 10:42:55.543029 2025] [authz_core:error] [pid 122842:tid 123011] [client 66.147.230.55:50472] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
...
show less
Brute-Force
Web App Attack
2025-09-08 07:24:19
(9 months ago)
[Mon Sep 08 08:28:17.357724 2025] [authz_core:error] [pid 122840:tid 122891] [client 66.147.230.55:4 ...
show more
[Mon Sep 08 08:28:17.357724 2025] [authz_core:error] [pid 122840:tid 122891] [client 66.147.230.55:45426] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Sep 08 09:24:17.321801 2025] [authz_core:error] [pid 122840:tid 122889] [client 66.147.230.55:35884] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
...
show less
Brute-Force
Web App Attack
2025-09-08 05:37:48
(9 months ago)
[Mon Sep 08 07:28:35.773639 2025] [authz_core:error] [pid 144889:tid 144926] [client 66.147.230.55:4 ...
show more
[Mon Sep 08 07:28:35.773639 2025] [authz_core:error] [pid 144889:tid 144926] [client 66.147.230.55:47852] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Sep 08 07:37:47.105136 2025] [authz_core:error] [pid 122840:tid 122887] [client 66.147.230.55:41852] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Sep 08 07:37:47.105136 2025] [authz_core:error] [pid 122840:tid 122887] [client 66.147.230.55:41852] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
...
show less
Brute-Force
Web App Attack
2025-09-08 05:04:25
(9 months ago)
[Mon Sep 08 03:23:04.286345 2025] [authz_core:error] [pid 122841:tid 123001] [client 66.147.230.55:6 ...
show more
[Mon Sep 08 03:23:04.286345 2025] [authz_core:error] [pid 122841:tid 123001] [client 66.147.230.55:60286] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Sep 08 04:46:53.589694 2025] [authz_core:error] [pid 122840:tid 122887] [client 66.147.230.55:55362] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Sep 08 06:41:56.119632 2025] [authz_core:error] [pid 122840:tid 122917] [client 66.147.230.55:39214] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Sep 08 07:04:23.561006 2025] [authz_core:error] [pid 123025:tid 123064] [client 66.147.230.55:35364] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
...
show less
Brute-Force
Web App Attack
🇩🇪
neckaralb-admin.de
2025-09-08 04:50:44
(9 months ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
octageeks.com
2025-09-08 04:06:21
(9 months ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇳🇱
maxxsense
2025-09-08 02:37:39
(9 months ago)
(wordpress) Failed wordpress login from 66.147.230.55 (US/United States/lotus.hostnownow.com)
Brute-Force
🇩🇪
LRob.fr
2025-09-08 00:15:37
(9 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇫🇮
FlexPete
2025-09-07 23:59:59
(9 months ago)
Web related brute force 20250907
Hacking
Brute-Force
Web App Attack
🇺🇸
myagent.site
2025-09-07 14:23:04
(9 months ago)
Blocked authentication attempt for banned user: admin
Hacking