JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.61.100.204

Neutral Activity

Abuse confidence score ?

0% Low Risk

18 reports

7 reporters · latest 1 month ago

ISP	HostRoyale LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46516
Hostname(s)	ip-45-61-100-204.fibre.fibrestream.ca
Domain Name	hostroyale.com
Country	🇺🇸 United States of America
City	Floris, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 45.61.100.204

This IP address has been reported a total of 18 times from 7 distinct sources. 45.61.100.204 was first reported on October 30th 2023, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: France with 1 report. The only category in these recent reports was: Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 bigorre.org	2026-08-07 15:07:14 (1 month ago)	Forbidden access for mozilla/5.0 (compatible; googlebot/2.1; +http://www.google.com/bot.html)	Bad Web Bot
🇺🇸 ipblock.com	2026-07-15 17:32:00 (2 months ago)	IPBlock protected site ID [4055-d][s=01]. Major crawler impostor. Mozilla/5.0 (compatible; Googleb ... show more IPBlock protected site ID [4055-d][s=01]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
🇺🇸 ipblock.com	2026-06-19 05:25:00 (3 months ago)	IPBlock protected site ID [4055-d][s=01]. Major crawler impostor. Mozilla/5.0 (compatible; Googleb ... show more IPBlock protected site ID [4055-d][s=01]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
🇺🇸 ipblock.com	2026-05-21 04:51:00 (4 months ago)	IPBlock protected site ID [4055-d][s=01]. Major crawler impostor. Mozilla/5.0 (compatible; Googleb ... show more IPBlock protected site ID [4055-d][s=01]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-29 17:33:36 (8 months ago)	(mod_security) mod_security (id:211190) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestre ... show more (mod_security) mod_security (id:211190) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:30:19.624467 2025] [security2:error] [pid 27842:tid 28084] [client 45.61.100.204:60097] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|www.kettlehill.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20tHeroTWifI.txt%60"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.com"] [uri "/card_scan.php"] [unique_id "aVK6q6ihNXaj9f6vryeIYQAAAEI"], referer: http://www.kettlehill.com/card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20tHeroTWifI.txt%60 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-01 15:15:05 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestre ... show more (mod_security) mod_security (id:210730) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 11:14:55.833107 2025] [security2:error] [pid 8590:tid 8615] [client 45.61.100.204:49117] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kettlehill.kettlehill.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.kettlehill.com"] [uri "/admin/error.log"] [unique_id "aQYj73l6EaMmM6sQysSizgAAAMc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 00:29:34 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestre ... show more (mod_security) mod_security (id:221260) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:29:28.999061 2025] [security2:error] [pid 172226:tid 172439] [client 45.61.100.204:59067] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|whm.kettlehill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kettlehill.com"] [uri "/test.cgi"] [unique_id "aIVy6H6EtJKYjh039GtHGAAAAIA"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 22:39:20 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestre ... show more (mod_security) mod_security (id:210492) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 18:39:12.433497 2025] [security2:error] [pid 3675243:tid 3675243] [client 45.61.100.204:33917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.farmers123.com"] [uri "/.env"] [unique_id "aDjiEL2IIZOoIkH66hMXIwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Susy Summer	2025-02-27 18:24:00 (1 year ago)	SQLi attempt attack	SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-02-27 14:37:09 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestre ... show more (mod_security) mod_security (id:210492) triggered by 45.61.100.204 (ip-45-61-100-204.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 09:34:05.024928 2025] [security2:error] [pid 27062:tid 27183] [client 45.61.100.204:44427] [client 45.61.100.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kettlehill.com"] [uri "/.env.development.local"] [unique_id "Z8B33QgBT3qhfe6UoI0_kgAAAEc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-26 03:00:12 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
Anonymous	2024-12-20 11:36:43 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-12-12 17:18:38 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-12-04 22:06:51 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-27 17:35:02 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.186.42.108

🇺🇾 200.40.115.238

🇮🇹 195.32.65.232

🇻🇳 160.250.128.49

🇨🇳 122.96.48.90

🇨🇳 116.232.22.43

🇧🇩 103.178.186.168

🇫🇷 85.217.140.41

🇷🇴 80.94.92.206

🇩🇪 77.91.66.181

🇺🇸 64.62.156.47

🇨🇳 60.211.233.218

🇺🇸 20.14.93.203

🇨🇳 14.103.218.183

🇺🇸 195.184.76.50

🇺🇿 193.104.179.199

🇺🇸 193.3.53.3

🇬🇧 188.240.59.50

🇧🇷 170.238.160.191

🇺🇸 165.154.173.35