🇺🇸
Dave Hansen
2026-06-08 09:53:07
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 45.86.201.60 (IS/Iceland/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-03-15 22:04:07
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 45.86.201.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.86.201.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 18:04:02.749707 2026] [security2:error] [pid 20959:tid 20959] [client 45.86.201.60:25611] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mindtoken.app|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mindtoken.app"] [uri "/restore/mysql.sql"] [unique_id "abcs0p5UuJXV3LRhhhv53wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 07:45:07
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 45.86.201.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.86.201.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 03:44:58.072645 2026] [security2:error] [pid 18440:tid 18440] [client 45.86.201.60:64505] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||thegoldentether.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thegoldentether.com"] [uri "/dump.sql"] [unique_id "abUR-mZRlJGV4kAu_yqrowAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-03-04 08:26:00
(3 months ago)
/bak/backup.rar
Hacking
Web App Attack
🇷🇺
DZBOT
2026-03-02 05:56:16
(3 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇮
gnom4ik
2026-02-22 08:11:04
(3 months ago)
ban-reviewer auto report; ip=45.86.201.60; scenario=http:scan; verdict=valid_ban; confidence=0.90; c ...
show more
ban-reviewer auto report; ip=45.86.201.60; scenario=http:scan; verdict=valid_ban; confidence=0.90; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; Port scan category (14) detected; No evidence of legitimate activity in summary; Decision stats show 1 active decision for IP
show less
Port Scan
Hacking
Brute-Force
🇯🇵
Valhalla
2026-02-19 04:11:53
(3 months ago)
/back/credentials.txt
Hacking
Web App Attack
🇯🇵
Valhalla
2026-02-13 11:46:33
(3 months ago)
/bak/directory.rar
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-08 16:02:31
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.86.201.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.86.201.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 11:02:21.959569 2026] [security2:error] [pid 20895:tid 20895] [client 45.86.201.60:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kryptonome.com"] [uri "/backups/sftp-config.json"] [unique_id "aYizjePb00j5tr7UrUuvwQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2026-02-08 15:51:33
(4 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2026-01-31 14:37:48
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 45.86.201.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.86.201.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 09:37:41.977342 2026] [security2:error] [pid 8012:tid 8012] [client 45.86.201.60:40593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intercotrading.com"] [uri "/old/sftp-config.json"] [unique_id "aX4TtZbM3r4VAa_4LP2cmQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-01-27 20:05:07
(4 months ago)
Too many Status 40X (11)
Request Overload (149)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-01-26 19:05:29
(4 months ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-01-24 15:05:30
(4 months ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇺🇸
myagent.site
2026-01-04 09:31:46
(5 months ago)
Blocking for trying to access an exploit file: //doc.php
Hacking