JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.61.96.163

45.61.96.163 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 3%: ?

ISP	HostRoyale LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46516
Hostname(s)	ip-45-61-96-163.fibre.fibrestream.ca
Domain Name	hostroyale.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.61.96.163

Whois 45.61.96.163

IP Abuse Reports for 45.61.96.163:

This IP address has been reported a total of 22 times from 6 distinct sources. 45.61.96.163 was first reported on August 7th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ipblock.com	2026-06-12 23:19:00 (1 week ago)	IPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compatible; Googleb ... show more IPBlock protected site ID [4055-d][s=07]. Major crawler impostor. Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-29 19:53:24 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 45.61.96.163 (ip-45-61-96-163.fibre.fibrestream ... show more (mod_security) mod_security (id:210350) triggered by 45.61.96.163 (ip-45-61-96-163.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 14:53:18.005106 2025] [security2:error] [pid 29977:tid 29999] [client 45.61.96.163:54183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.kettlehill.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kettlehill.net"] [uri "/"] [unique_id "aVLcLjWelXmsIDHwJWby9wAAAZQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 01:45:04 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 45.61.96.163 (ip-45-61-96-163.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.61.96.163 (ip-45-61-96-163.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 21:44:55.857799 2025] [security2:error] [pid 783496:tid 783521] [client 45.61.96.163:51063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kettlehill.com"] [uri "/wp-content/plugins/jsmol2wp/php/jsmol.php"] [unique_id "aIWEl0BIVxi3CeAsEkDzVgAAAVE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 19:12:02 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.61.96.163 (ip-45-61-96-163.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.61.96.163 (ip-45-61-96-163.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 15:11:51.939033 2025] [security2:error] [pid 3260425:tid 3260425] [client 45.61.96.163:52085] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.farmers123.com"] [uri "/.env_1"] [unique_id "aDixd1JZfYCARg0bMxfQOwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-04 08:37:37 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 45.61.96.163 (ip-45-61-96-163.fibre.fibrestream ... show more (mod_security) mod_security (id:210492) triggered by 45.61.96.163 (ip-45-61-96-163.fibre.fibrestream.ca): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 04:37:26.875562 2025] [security2:error] [pid 3760538:tid 3760538] [client 45.61.96.163:56847] [client 45.61.96.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nbcnewsradio.com"] [uri "/.env.production.local"] [unique_id "aBcnRhgPQNz7ClxdToF67gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-17 15:20:52 (1 year ago)	\| A web attack returned code 200 (success).	Hacking SQL Injection Web App Attack
🇦🇺 MAGIC	2024-11-23 01:02:07 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-11-19 02:54:55 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-12 02:03:14 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-04 22:15:49 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-28 01:29:07 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
🇺🇸 TheMadBeaker	2024-10-22 21:44:37 (1 year ago)	Fail2Ban Ban Triggered HTTP Attempted Bot Registration	Web Spam Web App Attack
Anonymous	2024-10-20 22:54:55 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-13 11:27:16 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-06 09:59:47 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.148.10.151

🇵🇦 201.218.238.227

🇬🇧 195.96.139.115

🇲🇽 187.189.198.254

🇰🇷 183.104.220.84

🇷🇺 176.53.182.81

🇺🇸 134.199.224.119

🇨🇳 112.234.165.19

🇸🇦 109.82.55.215

🇮🇳 106.210.207.204

🇧🇬 79.124.56.146

🇵🇰 72.255.33.225

🇳🇱 46.21.250.80

🇯🇵 45.192.199.188

🇧🇯 41.74.5.179

🇩🇪 31.77.129.211

🇺🇸 20.46.250.163

🇮🇩 9.154.37.90

🇮🇩 8.215.88.36

🇨🇳 1.193.39.62