AbuseIPDB » 45.89.242.41

45.89.242.41 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 11%: ?

11%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
Domain Name	netutils.io
Country	United Kingdom of Great Britain and Northern Ireland
City	London, England

Report 45.89.242.41

Whois 45.89.242.41

IP Abuse Reports for 45.89.242.41:

This IP address has been reported a total of 11 times from 10 distinct sources. 45.89.242.41 was first reported on February 15th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
wil.com	2024-11-30 22:17:04 (1 week ago)	GlobalProtect login attempts with user davisp.	VPN IP Brute-Force
TPI-Abuse	2024-11-09 09:14:41 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 45.89.242.41 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.89.242.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 04:14:33.213584 2024] [security2:error] [pid 30635:tid 30635] [client 45.89.242.41:16205] [client 45.89.242.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcoincasting.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoincasting.com"] [uri "/restore/wallet.dat"] [unique_id "Zy8n-dD-HiOit12byJQ9ugAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-06-24 10:51:09 (5 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Apache	2024-06-16 07:53:33 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 45.89.242.41 (GB/United Kingdom/-): 5 in the la ... show more(mod_security) mod_security (id:210492) triggered by 45.89.242.41 (GB/United Kingdom/-): 5 in the last 300 secs show less	Brute-Force Brute-Force Web App Attack Web App Attack
cloudbuster	2024-06-15 19:10:27 (5 months ago)	Detected: Mod_Security Violation	Web App Attack Web App Attack
hbrks	2024-05-24 00:24:59 (6 months ago)	HEAD http://p4u.xyz/back/backup.tar * statusCode: 503 *	Web Spam Hacking Bad Web Bot
oncord	2024-03-19 00:01:32 (8 months ago)	Form spam	Web Spam
Anonymous	2024-03-18 22:30:08 (8 months ago)	\| Blacklisted user agent (known malicious user agent).	Hacking SQL Injection Web App Attack
TPI-Abuse	2024-02-13 08:52:52 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 45.89.242.41 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 45.89.242.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 13 03:52:45.021152 2024] [security2:error] [pid 12191] [client 45.89.242.41:34533] [client 45.89.242.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|prostar.industries\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "prostar.industries"] [uri "/dump.sql"] [unique_id "Zcst3UJ_nO4abLH7AayKsAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
4server	2023-06-26 14:27:22 (1 year ago)	[MonJun2616:27:15.4214022023][security2:error][pid14518:tid47722516301568][client45.89.242.41:43559] ... show more[MonJun2616:27:15.4214022023][security2:error][pid14518:tid47722516301568][client45.89.242.41:43559][client45.89.242.41]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"178\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITICAL\"][hostname\"emobilitytime.ch\"][uri\"/wp-login.php\"][unique_id\"ZJmgQ03B7pNel4RSq2QnxgAAAEk\"][MonJun2616:27:16.1328652023][security2:error][pid14518:tid47722516301568][client45.89.242.41:43559][client45.89.242.41]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"python-requests/\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"178\"][id\"332039\"][rev\"4\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/.\"][severity\"CRITI show less	Blog Spam
Thaliruth	2023-02-15 13:14:43 (1 year ago)	45.89.242.41 - - [15/Feb/2023:14:14:42 +0100] "HEAD /bak/application.zip HTTP/1.1" 301 0 "-" "-"<br ... show more45.89.242.41 - - [15/Feb/2023:14:14:42 +0100] "HEAD /bak/application.zip HTTP/1.1" 301 0 "-" "-" ... show less	Hacking Web App Attack