🇫🇮
gnom4ik
2026-02-22 09:20:09
(3 months ago)
ban-reviewer auto report; ip=45.61.97.217; scenario=http:scan; verdict=valid_ban; confidence=0.85; c ...
show more
ban-reviewer auto report; ip=45.61.97.217; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; Decision is a ban with duration of 8400 minutes (5 days); AbuseIPDB categories include Port Scan (14), Hacking (15), Brute-Force (18), SSH (22) - all relevant to scan/exploit patterns
show less
Port Scan
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-01-22 09:59:06
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 45.61.97.217 (ip-45-61-97-217.fibre.fibrestream ...
show more
(mod_security) mod_security (id:225170) triggered by 45.61.97.217 (ip-45-61-97-217.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 04:58:58.441829 2026] [security2:error] [pid 29852:tid 29852] [client 45.61.97.217:39337] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brazilianbottom.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brazilianbottom.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXH04kSH0y0Z1wRQxVX5WgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
Jim Keir
2026-01-12 11:18:21
(4 months ago)
2026-01-12 11:18:20 45.61.97.217 File scanning, blocking 45.61.97.217 for 5 minutes
Web App Attack
🇮🇪
Jim Keir
2025-11-21 02:09:01
(6 months ago)
2025-11-21 02:09:00 45.61.97.217 File scanning, blocking 45.61.97.217 for 5 minutes
Web App Attack
🇬🇧
SecondEdge
2025-08-26 16:12:31
(9 months ago)
A web attack was detected from 45.61.97.217 (Canada / Ontario / Toronto) against 52.215.230.232 (Git ...
show more
A web attack was detected from 45.61.97.217 (Canada / Ontario / Toronto) against 52.215.230.232 (Git Variable Scan).
show less
Web App Attack
🇺🇸
FireballDWF
2025-08-18 15:15:16
(9 months ago)
404 NOT FOUND
Web App Attack
🇺🇸
FireballDWF
2025-08-03 20:50:07
(10 months ago)
404 NOT FOUND
Web App Attack
🇺🇸
TPI-Abuse
2025-07-04 23:33:41
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 45.61.97.217 (ip-45-61-97-217.fibre.fibrestream ...
show more
(mod_security) mod_security (id:225170) triggered by 45.61.97.217 (ip-45-61-97-217.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 04 19:33:38.214629 2025] [security2:error] [pid 8972:tid 8972] [client 45.61.97.217:52407] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.goglobex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.goglobex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGhk0nMXLU1aOwcefkcPaAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-12 07:13:04
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 45.61.97.217 (ip-45-61-97-217.fibre.fibrestream ...
show more
(mod_security) mod_security (id:225170) triggered by 45.61.97.217 (ip-45-61-97-217.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 12 02:12:53.532102 2024] [security2:error] [pid 1708] [client 45.61.97.217:35165] [client 45.61.97.217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||russiacoin.timelord2067.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "russiacoin.timelord2067.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZcnE9U5hRcAKpOqSAcH2igAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack