JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.41.173.58

45.41.173.58 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	HostRoyale LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46516
Hostname(s)	ip-45-41-173-58.fibre.fibrestream.ca
Domain Name	hostroyale.com
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.41.173.58

Whois 45.41.173.58

IP Abuse Reports for 45.41.173.58:

This IP address has been reported a total of 10 times from 5 distinct sources. 45.41.173.58 was first reported on October 30th 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-01-11 06:36:56 (4 months ago)	Blocked by UFW (TCP on 9100) Source port: 43661 TTL: 51 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9100) Source port: 43661 TTL: 51 Packet length: 60 TOS: 0x08 This report (for 45.41.173.58) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 [email protected]	2025-12-31 23:45:44 (5 months ago)	Attack attempt against Interwebbi servers; Port Scan detected from 45.41.173.58 (US/United States/ ... show more Attack attempt against Interwebbi servers; Port Scan detected from 45.41.173.58 (US/United States/ip-45-41-173-58.fibre.fibrestream.ca). 5 hits in the last 291 seconds; IP: 45.41.173.58; Ports: *; Direction: 0; Trigger: PS_LIMIT; show less	Brute-Force
🇺🇸 TPI-Abuse	2025-12-29 18:01:28 (5 months ago)	(mod_security) mod_security (id:220150) triggered by 45.41.173.58 (ip-45-41-173-58.fibre.fibrestream ... show more (mod_security) mod_security (id:220150) triggered by 45.41.173.58 (ip-45-41-173-58.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 13:00:51.631418 2025] [security2:error] [pid 12486:tid 12550] [client 45.41.173.58:36121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\.{0,399}\\\\*\\\\/)?select)" at ARGS:id. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)\|\|www.kettlehill.com\|F\|2"] [data "-1unionselect1,md5(999999999),3,4,5--"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.kettlehill.com"] [uri "/admin/manage_user.php"] [unique_id "aVLB05Einm-CivtncBSUcAAAAVg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 11:35:38 (6 months ago)	(mod_security) mod_security (id:212620) triggered by 45.41.173.58 (ip-45-41-173-58.fibre.fibrestream ... show more (mod_security) mod_security (id:212620) triggered by 45.41.173.58 (ip-45-41-173-58.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 06:35:31.061404 2025] [security2:error] [pid 30752:tid 30752] [client 45.41.173.58:47627] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|ftp.nbcnewsradio.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /modules/fieldpopupnewsletter/ajax.php?callback=<script>alert(document.domain)</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "ftp.nbcnewsradio.com"] [uri "/modules/fieldpopupnewsletter/ajax.php"] [unique_id "aRXCg-6LZljPFe3NpXNRmgAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 00:10:19 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.41.173.58 (ip-45-41-173-58.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.41.173.58 (ip-45-41-173-58.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:09:53.360505 2025] [security2:error] [pid 83761:tid 84008] [client 45.41.173.58:34863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/.env.production.local"] [unique_id "aIVuUWIf-iQLocfPxyOalwAAAVI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 19:57:33 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 45.41.173.58 (ip-45-41-173-58.fibre.fibrestream ... show more (mod_security) mod_security (id:221260) triggered by 45.41.173.58 (ip-45-41-173-58.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 15:57:24.660968 2025] [security2:error] [pid 3348419:tid 3348419] [client 45.41.173.58:59757] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|webmail.farmers123.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.farmers123.com"] [uri "/cgi-bin/test-cgi"] [unique_id "aDi8JFC6is4ao2EW5oK-vQAAAAU"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-17 11:20:05 (1 year ago)	\| Shellshock attack detected	Hacking SQL Injection Web App Attack
🇺🇸 ChamberofCommerce.com	2023-11-06 00:13:00 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:227 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-11-02 04:27:59 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot
🇺🇸 ChamberofCommerce.com	2023-10-30 09:51:53 (2 years ago)	Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ... show more Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226 show less	Bad Web Bot

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 2406:da19:776:6e01:14e5:91d:3d09:c382

🇺🇸 205.210.31.50

🇨🇳 202.105.98.252

🇲🇽 186.96.145.241

🇦🇺 120.157.11.162

🇺🇸 109.105.210.84

🇬🇧 35.203.210.230

🇨🇳 183.191.29.59

🇨🇳 180.76.234.93

🇳🇱 176.65.139.218

🇨🇳 171.105.76.46

🇧🇷 170.238.160.191

🇨🇳 121.231.24.154

🇩🇪 84.32.10.200

🇬🇧 45.82.76.110

🇻🇳 42.96.20.16

🇺🇸 38.93.174.250

🇺🇸 18.116.44.183

🇺🇸 216.180.246.187

🇳🇱 185.226.197.29