JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.250.67.123

Neutral Activity

Abuse Confidence Score

0% Low Risk

4 reports

1 reporter · latest 1 year ago

ISP: HostRoyale Technologies Pvt Ltd
Usage Type: Data Center/Web Hosting/Transit
ASN: AS203020
Domain Name: hostroyale.com
Country: 🇨🇦 Canada
City: Toronto, Ontario

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

45.250.67.123 has been reported 4 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

4 from 1 distinct reporter

First reported

May 1st 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-11-12 04:03:21 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.250.67.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 23:03:13.199493 2025] [security2:error] [pid 10083:tid 10083] [client 45.250.67.123:40033] M ... show more (mod_security) mod_security (id:210492) triggered by 45.250.67.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 23:03:13.199493 2025] [security2:error] [pid 10083:tid 10083] [client 45.250.67.123:40033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.nbcnewsradio.com"] [uri "/.env"] [unique_id "aRQHAUsQP8og8vNWo4DHwAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-01 07:25:16 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.250.67.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 01 03:25:08.455233 2025] [security2:error] [pid 32047:tid 32125] [client 45.250.67.123:46855] M ... show more (mod_security) mod_security (id:210730) triggered by 45.250.67.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 01 03:25:08.455233 2025] [security2:error] [pid 32047:tid 32125] [client 45.250.67.123:46855] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.staging.kettlehill.com\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.staging.kettlehill.com"] [uri "/....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\....\\\\windows\\\\win.ini"] [unique_id "aGONVAF1tdoO2im1K3V7ZAAAAJA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-30 19:37:57 UTC · (1 year ago)	(mod_security) mod_security (id:210730) triggered by 45.250.67.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 15:37:52.943126 2025] [security2:error] [pid 583747:tid 583747] [client 45.250.67.123:42429] ... show more (mod_security) mod_security (id:210730) triggered by 45.250.67.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 15:37:52.943126 2025] [security2:error] [pid 583747:tid 583747] [client 45.250.67.123:42429] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nbcnewsradio.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nbcnewsradio.com"] [uri "/header.php.bak"] [unique_id "aDoJEONUDZFGNmu3gLTChQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-01 03:11:23 UTC · (1 year ago)	(mod_security) mod_security (id:212620) triggered by 45.250.67.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 30 23:11:15.018149 2025] [security2:error] [pid 10928:tid 11087] [client 45.250.67.123:39001] [ ... show more (mod_security) mod_security (id:212620) triggered by 45.250.67.123 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 30 23:11:15.018149 2025] [security2:error] [pid 10928:tid 11087] [client 45.250.67.123:39001] [client 45.250.67.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|ftp.kettlehill.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /wp-content/plugins/forget-about-shortcode-buttons/assets/js/fasc-buttons/popup.php?source=1&ver=1</script><script>alert(document.domain)</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.kettlehill.com"] [uri "/wp-content/plugins/forget-about-shortcode-buttons/assets/js/fasc-buttons/popup.php"] [unique_id "aBLmU2hpHha-h36oCB5x0gAAAJU"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 210.103.32.183

🇧🇩 103.77.253.56

🇺🇸 50.217.40.11

🇺🇸 50.6.228.32

🇯🇵 34.84.205.205

🇬🇧 5.226.140.122

🇺🇸 216.25.89.119

🇻🇳 210.245.20.230

🇧🇬 193.24.211.206

🇺🇸 185.96.37.64

🇺🇸 170.168.240.66

🇳🇱 151.245.151.174

🇳🇱 134.209.85.233

🇬🇧 51.89.135.235

🇬🇧 51.68.222.41

🇺🇸 50.188.204.213

🇺🇸 50.187.155.130

🇧🇪 35.210.145.218

🇺🇸 5.83.138.189

🇳🇱 188.42.73.101