🇩🇪
FeG Deutschland
2026-06-11 18:19:40
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
4server
2026-04-21 12:20:15
(4 months ago)
[TueApr2114:20:13.5134062026][security2:error][pid3025238:tid3025267][client45.3.41.224:0]ModSecurit ...
show more
[TueApr2114:20:13.5134062026][security2:error][pid3025238:tid3025267][client45.3.41.224:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"craniosacraltherapy.ch\"][uri\"/dump.sql\"][unique_id\"aedrfZrE_IcxiUza34QeRAAAABM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2026-03-15 18:25:02
(5 months ago)
IM360 WAF: Attempt to upload malware
Hacking
2026-02-18 21:16:31
(6 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 20:27:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 15:27:11.826322 2026] [security2:error] [pid 14150:tid 14150] [client 45.3.41.224:21319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trendwolf.org"] [uri "/backup/.git/config"] [unique_id "aZYgn5iQmb_KdFokxVpR-wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 18:42:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:42:26.821945 2026] [security2:error] [pid 4210:tid 4210] [client 45.3.41.224:13463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thirdplanettechnology.space"] [uri "/config/.env"] [unique_id "aZYIEibWUEwUc5SbKSRtwAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-02-09 01:55:20
(6 months ago)
Domain : cleaners.greenleaflaundry.co.uk
Rule : wp-login
2026-02-09 01:53:17 ***hidden-privacy*** GE ...
show more
Domain : cleaners.greenleaflaundry.co.uk
Rule : wp-login
2026-02-09 01:53:17 ***hidden-privacy*** GET /wp-login.php - 443 - 45.3.41.224 HTTP/2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36 - cleaners.greenleaflaundry.co.uk 404 0 2 1527 659 102 - -
show less
Web App Attack
🇺🇸
nowyouknow
2025-12-31 12:54:45
(7 months ago)
(From [email protected] )
Hi, it’s Jayrn.
If your site already uses — or is preparing t ...
show more
(From [email protected] )
Hi, it’s Jayrn.
If your site already uses — or is preparing to use — affiliate links, this will be relevant.
One issue I see constantly is that monetization is treated as something you “add later,” instead of something that’s designed into the site from the beginning.
That usually leads to:
random placement of links
unclear visitor intent
unpredictable income
It works, but never consistently.
I put together a short explanation of why this happens and what changes once monetization is structured properly:
https://marketersmentor.com/recurring-income-system.php?refer=commonwealthfamilyhealthcare.com
You’ll know quickly whether this applies to your situation.
Jayrn
PS: And one quick note so you’re not wondering why you’re hearing from me:
I only reach out to website owners because they’re the ones actively building something online. I’m not blasting random emails.
I’m simply sharing a resource that has been helping a lot of people create pr
show less
Phishing
Web Spam
🇺🇸
TPI-Abuse
2025-11-26 06:16:55
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:16:45.753035 2025] [security2:error] [pid 2747:tid 2747] [client 45.3.41.224:11513] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.vtmooses.us"] [uri "/.env"] [unique_id "aSabTTVyhCMo2swgU53JSgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 02:06:53
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:06:46.773993 2025] [security2:error] [pid 14881:tid 14881] [client 45.3.41.224:26241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.dennisdsmith.com"] [uri "/.svn/wc.db"] [unique_id "aSZgtlbdJbKCLXVwRo3n9AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:26:09
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:26:02.534827 2025] [security2:error] [pid 8510:tid 8510] [client 45.3.41.224:59431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.revision.ws"] [uri "/.git/HEAD"] [unique_id "aSZXKmd35AfOgXRSvPyVigAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:01:03
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:00:58.768355 2025] [security2:error] [pid 18669:tid 18669] [client 45.3.41.224:42349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.krislajeskiedesign.com"] [uri "/.env"] [unique_id "aSU4ChtX19yaI96DCOv_RQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:43:17
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:43:09.808015 2025] [security2:error] [pid 11370:tid 11370] [client 45.3.41.224:28651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jeremyurbanski.com"] [uri "/.svn/wc.db"] [unique_id "aSQorUuYmeCGiSYNblxamQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:46:43
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.41.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:46:39.145329 2025] [security2:error] [pid 32073:tid 32073] [client 45.3.41.224:53945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kentsavagelaw.com"] [uri "/.env"] [unique_id "aSPxPxxKd4KJv1KgKdTEBAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-02 22:12:00
(9 months ago)
Unauthorized connection attempt
Brute-Force