JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.41.169.20

45.41.169.20 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 21%: ?

21%

ISP	HostRoyale LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46516
Hostname(s)	ip-45-41-169-20.fibre.fibrestream.ca
Domain Name	hostroyale.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.41.169.20

Whois 45.41.169.20

IP Abuse Reports for 45.41.169.20:

This IP address has been reported a total of 22 times from 9 distinct sources. 45.41.169.20 was first reported on January 25th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-07-30 15:15:06 (5 hours ago)	Forbidden access for mozilla/5.0 (compatible; googlebot/2.1; +http://www.google.com/bot.html)	Bad Web Bot
🇺🇸 ipblock.com	2026-07-21 12:34:00 (1 week ago)	IPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compatible; Googleb ... show more IPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
🇵🇹 Subnet Shadow Specter	2026-07-19 12:40:32 (1 week ago)	[Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 45.41.169.20 claimed ... show more [Security] [Category: Bot Masquerading] FCrDNS mismatch detected. [IP Address]: 45.41.169.20 claimed a fake identity but failed forward-confirmed reverse DNS verification. Automated scraping via spoofed User-Agent `compatible; Googlebot/2.1`. [Action]: IP block initiated. [User-Agent]: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) [IoA Datetime]: 2026-07-19 13:40:31 UTC +1. show less	Port Scan Hacking Spoofing Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-06-26 15:03:00 (1 month ago)	IPBlock protected site ID [4055-d][s=01]. Major crawler impostor. Mozilla/5.0 (compatible; Googleb ... show more IPBlock protected site ID [4055-d][s=01]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
🇺🇸 ipblock.com	2026-06-24 02:32:00 (1 month ago)	IPBlock protected site ID [3192-af][s=06]. Major crawler impostor. Mozilla/5.0 (compatible; Google ... show more IPBlock protected site ID [3192-af][s=06]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-29 11:43:56 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 07:43:48.436340 2026] [security2:error] [pid 17292:tid 17310] [client 45.41.169.20:54873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.furball.m3sxa.com"] [uri "/.env.php"] [unique_id "ahl79Gh57-Mngulgnb1sZgAAANA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-05-29 11:05:19 (2 months ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-28 22:05:40 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-27. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-05-27 22:01:09 (2 months ago)	Auto-ban: >3000 req/min op 2026-05-27	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-05-27 19:34:05 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 15:33:58.110109 2026] [security2:error] [pid 24465:tid 24465] [client 45.41.169.20:40065] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tolenaar.com"] [uri "/.env.development"] [unique_id "ahdHJu6LmME9EIsBQZ8FjQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 17:44:09 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 13:44:01.790312 2026] [security2:error] [pid 32613:tid 32613] [client 45.41.169.20:46879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bryteandbroderick.org"] [uri "/wp-config.php"] [unique_id "ahctYUDFRx3goaigB0YMGgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 14:42:31 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 10:42:21.368964 2026] [security2:error] [pid 20862:tid 20862] [client 45.41.169.20:57301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agirlwithaguitar.com"] [uri "/app/config/parameters.yml"] [unique_id "ahcCzYt8pYEvxbYpREqz9QAAAAU"], referer: https://www.google.com/search?q=agirlwithaguitar.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-27 12:00:20 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 08:00:14.277783 2026] [security2:error] [pid 29466:tid 29476] [client 45.41.169.20:52151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lead-sleds.com"] [uri "/.env.development"] [unique_id "ahbczpTo37TXNDmKLrrXwwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-05-27 00:57:54 (2 months ago)	[WedMay2702:57:50.3605572026][security2:error][pid366225:tid366351][client45.41.169.20:0]ModSecurity ... show more [WedMay2702:57:50.3605572026][security2:error][pid366225:tid366351][client45.41.169.20:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".key\"][severity\"ERROR\"][hostname\"carolin-mizio.ch\"][uri\"/config/master.key\"][unique_id\"ahZBjv1K8eFyiXSkF9rmXwAAAAw\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 17:57:36 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.41.169.20 (ip-45-41-169-20.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 13:57:08.061385 2026] [security2:error] [pid 28459:tid 28459] [client 45.41.169.20:43415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.l3prime.systemcapacityoptimization.com"] [uri "/.env.backup"] [unique_id "ahXe9Fg-7s0dB9rKelLaJAAAABE"], referer: https://www.google.com/search?q=www.l3prime.systemcapacityoptimization.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.55.226.228

🇺🇸 170.106.35.137

🇭🇰 103.229.125.106

🇳🇱 91.92.40.47

🇺🇿 89.126.222.149

🇷🇴 80.94.92.55

🇺🇸 72.179.206.48

🇺🇸 23.95.10.173

🇮🇳 49.37.42.220

🇦🇴 193.163.125.131

🇸🇪 171.25.158.47

🇦🇹 109.70.100.8

🇺🇸 45.8.19.112

🇸🇬 43.156.115.178

🇬🇧 35.203.211.138

🇭🇰 31.77.203.33

🇨🇳 1.83.125.104

🇨🇳 203.83.231.93

🇹🇿 197.250.8.4

🇺🇸 170.106.187.106