2026-11-11 13:49:17
UTC ·
(3 hours ago)
LH-Watcher: BRUTE_FORCE
Bad Web Bot
2026-11-07 00:44:10
UTC ·
(4 days ago)
LH-Watcher: BRUTE_FORCE
Bad Web Bot
2026-11-04 00:32:05
UTC ·
(1 week ago)
LH-Watcher: BRUTE_FORCE
Bad Web Bot
2026-10-31 10:44:09
UTC ·
(1 week ago)
LH-Watcher: BRUTE_FORCE
Bad Web Bot
2026-10-28 01:26:21
UTC ·
(2 weeks ago)
LH-Watcher: BRUTE_FORCE
Bad Web Bot
2026-10-24 18:39:07
UTC ·
(2 weeks ago)
LH-Watcher: BRUTE_FORCE
Bad Web Bot
2026-10-21 13:18:03
UTC ·
(3 weeks ago)
LH-Watcher: BRUTE_FORCE
Bad Web Bot
2026-10-18 08:30:19
UTC ·
(3 weeks ago)
LH-Watcher: BRUTE_FORCE
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-17 02:29:30
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 157.245.166.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 22:29:26.485188 2026] [security2:error] [pid 24620:tid 24620] [client 157.245.166.150:3444 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.245.166.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 22:29:26.485188 2026] [security2:error] [pid 24620:tid 24620] [client 157.245.166.150:34444] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rootsofwellnessayurveda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rootsofwellnessayurveda.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atLdhsvT3wsHAqhAXS5tRgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-10-16 00:53:18
UTC ·
(3 weeks ago)
Domain : runbalmoral.com
Rule : Method-Head
2026-10-16 00:27:58 W3SVC274 PLESK76 ***hidden-privacy***25 HEAD /content/ - 443 - 157.245.166.150 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0 Safa ...
show more
Domain : runbalmoral.com
Rule : Method-Head
2026-10-16 00:27:58 W3SVC274 PLESK76 ***hidden-privacy***25 HEAD /content/ - 443 - 157.245.166.150 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0 Safari/537.36 - - runbalmoral.com 200 0 0 728 333 397 - -
show less
Port Scan
🇺🇸
TPI-Abuse
2026-10-15 21:55:52
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 157.245.166.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 17:55:44.356563 2026] [security2:error] [pid 12033:tid 12033] [client 157.245.166.150:5117 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.245.166.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 17:55:44.356563 2026] [security2:error] [pid 12033:tid 12033] [client 157.245.166.150:51176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arsenalfordemocracy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atFL4Ow_ktoA4Pdt9rr_SgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 16:05:54
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 157.245.166.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:05:51.505077 2026] [security2:error] [pid 22439:tid 22439] [client 157.245.166.150:5087 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.245.166.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:05:51.505077 2026] [security2:error] [pid 22439:tid 22439] [client 157.245.166.150:50878] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.crystaljohns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.crystaljohns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atD539rooqYjoc_LYlL5jgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 07:17:50
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 157.245.166.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:17:43.869619 2026] [security2:error] [pid 12127:tid 12127] [client 157.245.166.150:5604 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.245.166.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:17:43.869619 2026] [security2:error] [pid 12127:tid 12127] [client 157.245.166.150:56040] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bostonlog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bostonlog.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atB-F0_P7-hoM1ZZCxB6GQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-14 23:38:49
UTC ·
(3 weeks ago)
LH-Watcher: BRUTE_FORCE
Bad Web Bot
