๐ช๐ธ
gnom4ik
2026-02-20 23:09:30
(8 months ago)
ban-reviewer auto report; ip=66.29.132.7; scenario=http:scan; verdict=valid_ban; confidence=0.85; ca ...
show more
ban-reviewer auto report; ip=66.29.132.7; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for port scan (category 14) and hacking (category 15) in abuseipdb context; Decision is a ban with duration of 7800 minutes (about 5.4 days), consistent with threat response; No evidence of legitimate activity or user behavior in the summary dat
show less
Port Scan
Hacking
Brute-Force
๐ซ๐ท
Kenshin869
2025-12-05 07:43:22
(10 months ago)
Wordpress unauthorized access attempt
Brute-Force
๐ฒ๐พ
Rizzy
2025-11-21 14:07:33
(11 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-21 13:58:06
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 66.29.132.7 (premium199.web-hosting.com): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 66.29.132.7 (premium199.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 08:58:00.716638 2025] [security2:error] [pid 1567:tid 1567] [client 66.29.132.7:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hvacs-aircon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hvacs-aircon.com"] [uri "/wp-json/wp/v2/usErs"] [unique_id "aSBv6LPqRudNWVJEKRHHVgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mind5t0rm
2025-11-21 11:59:41
(11 months ago)
(XMLRPC) WP XMLPRC Attack 66.29.132.7 (US/United States/premium199.web-hosting.com): 3 in the last 3 ...
show more
(XMLRPC) WP XMLPRC Attack 66.29.132.7 (US/United States/premium199.web-hosting.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 66.29.132.7 - - [21/Nov/2025:18:59:38 +0700] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.146 Safari/537.36"
66.29.132.7 - - [21/Nov/2025:18:59:39 +0700] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.146 Safari/537.36"
66.29.132.7 - - [21/Nov/2025:18:59:40 +0700] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.146 Safari/537.36"
show less
Port Scan
๐ฟ๐ฆ
Immersive
2025-11-21 11:14:19
(11 months ago)
Probing server for potential vulnerabilities
Hacking
Web App Attack
๐ซ๐ฎ
stinpriza
2025-11-21 09:45:33
(11 months ago)
Web App Attack
Web App Attack
๐ฒ๐น
Malta
2025-11-21 05:49:11
(11 months ago)
66.29.132.7 - - [21/Nov/2025:06:49:11 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 6. ...
show more
66.29.132.7 - - [21/Nov/2025:06:49:11 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; MALC; rv:11.0) like Gecko"
show less
Hacking
Web App Attack
๐น๐ท
cagatayakinci.com
2025-11-21 05:17:00
(11 months ago)
Web App Attack was Blocked. IP has been banned for 1 day Cuma, 21 Kasฤฑm 2025 08:17 รร
Web App Attack
๐ณ๐ฑ
Site.eu
2025-11-21 03:36:20
(11 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
mind5t0rm
2025-11-21 01:15:23
(11 months ago)
(XMLRPC) WP XMLPRC Attack 66.29.132.7 (US/United States/premium199.web-hosting.com): 3 in the last 3 ...
show more
(XMLRPC) WP XMLPRC Attack 66.29.132.7 (US/United States/premium199.web-hosting.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 66.29.132.7 - - [21/Nov/2025:08:15:16 +0700] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)"
66.29.132.7 - - [21/Nov/2025:08:15:17 +0700] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)"
66.29.132.7 - - [21/Nov/2025:08:15:18 +0700] "POST /xmlrpc.php HTTP/2.0" 403 146 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; Touch; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; Tablet PC 2.0)"
show less
Port Scan
๐ฌ๐ง
[email protected]
2025-11-21 00:56:07
(11 months ago)
...
Brute-Force
SSH
๐ฉ๐ช
ardexter
2025-11-20 22:06:36
(11 months ago)
Wordpress attack and DDOS
DDoS Attack
Web App Attack
๐บ๐ธ
integrantservices.com
2025-11-20 21:11:41
(11 months ago)
(wordpress) Failed wordpress login from 66.29.132.7 (premium199.web-hosting.com)
Brute-Force
๐ซ๐ท
dynamix
2025-11-20 17:55:20
(11 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack