🇩🇪
EGP Abuse Dept
2026-11-14 10:56:20
UTC ·
(3 hours ago)
Scanning for web/db/file exploits on www.luxalonplafonds.be
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 02:51:44
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 45.41.189.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:51:37.043080 2026] [security2:error] [pid 7732:tid 7760] [client 45.41.189.145:35813] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 45.41.189.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:51:37.043080 2026] [security2:error] [pid 7732:tid 7760] [client 45.41.189.145:35813] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.kettlehill.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.kettlehill.com"] [uri "/my.key"] [unique_id "ahzzuSKq_i-FrRbJEDIO_QAAAU4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 13:08:42
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.41.189.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 08:08:36.910164 2026] [security2:error] [pid 12299:tid 12342] [client 45.41.189.145:46367] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.41.189.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 08:08:36.910164 2026] [security2:error] [pid 12299:tid 12342] [client 45.41.189.145:46367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/web.config"] [unique_id "aX9QVM_CAppeKcdveJ3qLgAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-01 21:30:07
UTC ·
(11 months ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-12-01 06:23:23
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 45.41.189.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 01:23:14.473857 2025] [security2:error] [pid 27471:tid 27491] [client 45.41.189.145:36729] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.41.189.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 01:23:14.473857 2025] [security2:error] [pid 27471:tid 27491] [client 45.41.189.145:36729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kettlehill.net"] [uri "/a.htaccess"] [unique_id "aS00UnLXOKC0tXS7y0kpIgAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
Tokolosh Hunters
2025-11-25 07:30:03
UTC ·
(11 months ago)
AutoBlockWindow-Known bad useragent query-2025-11-25 07:30:03
Bad Web Bot
🇳🇱
exxos
2025-10-03 11:03:01
UTC ·
(1 year ago)
Traversal attacks
Hacking
🇺🇸
TPI-Abuse
2025-10-01 16:57:14
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 45.41.189.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 12:57:05.992839 2025] [security2:error] [pid 30109:tid 30120] [client 45.41.189.145:45263] M ...
show more
(mod_security) mod_security (id:210730) triggered by 45.41.189.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 12:57:05.992839 2025] [security2:error] [pid 30109:tid 30120] [client 45.41.189.145:45263] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.kettlehill.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.kettlehill.com"] [uri "/www.key"] [unique_id "aN1dYZmcYLK3QOnvb--J0gAAAYQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
slartybartfast69420blazit
2025-08-14 20:42:43
UTC ·
(1 year ago)
Fail2ban picked up 45.41.189.145 attacking nginx
Web App Attack
🇿🇦
slartybartfast69420blazit
2025-08-13 20:38:33
UTC ·
(1 year ago)
Fail2ban picked up 45.41.189.145 attacking nginx
Web App Attack
🇿🇦
slartybartfast69420blazit
2025-08-12 20:37:03
UTC ·
(1 year ago)
Fail2ban picked up 45.41.189.145 attacking nginx
Web App Attack
🇿🇦
slartybartfast69420blazit
2025-08-11 20:33:13
UTC ·
(1 year ago)
Fail2ban picked up 45.41.189.145 attacking nginx
Web App Attack
🇿🇦
slartybartfast69420blazit
2025-08-09 20:49:17
UTC ·
(1 year ago)
Fail2ban picked up 45.41.189.145 attacking nginx
Web App Attack
🇿🇦
slartybartfast69420blazit
2025-08-08 20:46:22
UTC ·
(1 year ago)
Fail2ban picked up 45.41.189.145 attacking nginx
Web App Attack
🇿🇦
slartybartfast69420blazit
2025-08-07 20:43:34
UTC ·
(1 year ago)
Fail2ban picked up 45.41.189.145 attacking nginx
Web App Attack
