๐บ๐ธ
cwytech
2026-07-05 13:30:27
(3 months ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wordpress-login-lockdown-high.
Bad Web Bot
Web App Attack
Anonymous
2026-03-04 21:00:18
(7 months ago)
Failed Wordpress Logins
Web App Attack
๐ซ๐ฎ
gnom4ik
2026-02-21 19:59:59
(8 months ago)
ban-reviewer auto report; ip=66.175.44.38; scenario=http:scan; verdict=valid_ban; confidence=0.85; c ...
show more
ban-reviewer auto report; ip=66.175.44.38; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP scanning activity (scenario: http:scan); Decision is part of a sustained abuse pattern (ip_active_decisions_total: 1); No evidence of legitimate use or user activity in the summary
show less
Port Scan
Hacking
Brute-Force
๐ณ๐ฑ
GabrielJST
2026-02-05 20:09:44
(8 months ago)
(wordpress) Failed wordpress login from 66.175.44.38 (CA/Canada/web178c40.carrierzone.com)
Brute-Force
๐บ๐ธ
Rip
2026-02-05 20:00:06
(8 months ago)
Authentication attack attempt. CMS Brute Force - Access Forbidden
Brute-Force
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-02-05 19:58:29
(8 months ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa01]
Bad Web Bot
Web App Attack
๐ฉ๐ช
Spidrweb.co.uk
2026-02-05 19:45:28
(8 months ago)
Brute-Force WordPress attack (155.98)
Web App Attack
๐บ๐ธ
mind5t0rm
2026-02-05 19:43:00
(8 months ago)
(XMLRPC) WP XMLPRC Attack 66.175.44.38 (CA/Canada/web178c40.carrierzone.com): 3 in the last 3600 sec ...
show more
(XMLRPC) WP XMLPRC Attack 66.175.44.38 (CA/Canada/web178c40.carrierzone.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 66.175.44.38 - - [06/Feb/2026:02:20:59 +0700] "GET /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
66.175.44.38 - - [06/Feb/2026:02:39:34 +0700] "GET /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
66.175.44.38 - - [06/Feb/2026:02:42:59 +0700] "GET /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
show less
Port Scan
๐บ๐ธ
mind5t0rm
2026-02-05 18:06:10
(8 months ago)
(XMLRPC,WPLOGIN) Login failure/trigger from 66.175.44.38 (CA/Canada/web178c40.carrierzone.com): 3 in ...
show more
(XMLRPC,WPLOGIN) Login failure/trigger from 66.175.44.38 (CA/Canada/web178c40.carrierzone.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 66.175.44.38 - - [06/Feb/2026:00:18:02 +0700] "GET /wp-login.php HTTP/2.0" 200 2451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
66.175.44.38 - - [06/Feb/2026:00:18:03 +0700] "POST /wp-login.php HTTP/2.0" 200 2576 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
66.175.44.38 - - [06/Feb/2026:01:06:06 +0700] "GET /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
show less
Port Scan
๐บ๐ธ
mind5t0rm
2026-02-05 14:50:06
(8 months ago)
(XMLRPC,WPLOGIN) Login failure/trigger from 66.175.44.38 (CA/Canada/web178c40.carrierzone.com): 3 in ...
show more
(XMLRPC,WPLOGIN) Login failure/trigger from 66.175.44.38 (CA/Canada/web178c40.carrierzone.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 66.175.44.38 - - [05/Feb/2026:21:09:40 +0700] "GET /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
66.175.44.38 - - [05/Feb/2026:21:40:59 +0700] "GET /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
66.175.44.38 - - [05/Feb/2026:21:50:04 +0700] "GET /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
show less
Port Scan
Anonymous
2026-02-05 13:37:33
(8 months ago)
wordpress-trap
Web App Attack
๐ฒ๐น
Malta
2026-02-05 01:28:47
(8 months ago)
66.175.44.38 - - [05/Feb/2026:02:28:47 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ...
show more
66.175.44.38 - - [05/Feb/2026:02:28:47 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-01-24 23:42:06
(8 months ago)
Brute-Force
Web App Attack
๐บ๐ธ
mind5t0rm
2026-01-24 15:18:32
(8 months ago)
(XMLRPC) WP XMLPRC Attack 66.175.44.38 (CA/Canada/web178c40.carrierzone.com): 3 in the last 3600 sec ...
show more
(XMLRPC) WP XMLPRC Attack 66.175.44.38 (CA/Canada/web178c40.carrierzone.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 66.175.44.38 - - [24/Jan/2026:22:18:31 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; MATMJS; rv:11.0) like Gecko"
66.175.44.38 - - [24/Jan/2026:22:18:31 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; MATMJS; rv:11.0) like Gecko"
66.175.44.38 - - [24/Jan/2026:22:18:32 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; MATMJS; rv:11.0) like Gecko"
show less
Port Scan
Anonymous
2026-01-24 15:03:04
(8 months ago)
Domain : dolfmol.com
Rule : WEB
IP in black list
Port Scan