AbuseIPDB » 170.254.145.210
170.254.145.210 was found in our database!
This IP was reported 7 times. Confidence of
Abuse
is 22% : ?
ISP
nobre telecom ltda
Usage Type
Fixed Line ISP
ASN
AS265398
Hostname(s)
170-254-145-210-nobretelecom.com.br
Domain Name
nobretelecom.com.br
Country
π§π·
Brazil
City
Sao Paulo, Sao Paulo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 170.254.145.210 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
170.254.145.210 was first reported on
August 5th 2023 , and the most recent report was
2 days ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
πΊπΈ
TPI-Abuse
2026-07-30 07:53:25
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 170.254.145.210 (170-254-145-210-nobretelecom.c ...
show more
(mod_security) mod_security (id:210730) triggered by 170.254.145.210 (170-254-145-210-nobretelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 03:53:17.786026 2026] [security2:error] [pid 464820:tid 464820] [client 170.254.145.210:42053] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nancyscafeandcatering.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/moontubes.com"] [unique_id "amsC7Y6akHeMN6Oo0uSdCAAAABY"], referer: http://www.nancyscafeandcatering.com/wp-content/themes/eatery/nav.php?-Menu-=moontubes.com
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
Sklurk
2026-07-29 02:21:52
(3 days ago)
Web App Attack
Web App Attack
πΊπΈ
kosada.com
2026-07-13 04:44:58
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
πΊπΈ
COMPLEX
2026-03-29 00:04:54
(4 months ago)
Unsolicited TCP traffic | Action: DROP | Port 443
Phishing
π©πͺ
Pingger Shikkoken
2023-11-17 03:45:05
(2 years ago)
Participating in DDoS Amplification Attack! Sending 11 requests over 42975s asking for ?0? of cisco. ...
show more
Participating in DDoS Amplification Attack! Sending 11 requests over 42975s asking for ?0? of cisco.com, atlassian.com, apple.com
show less
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host
π¬π§
Steve
2023-09-25 16:34:47
(2 years ago)
Attempts against non-existent wordpress site
Brute-Force
Web App Attack
πΊπ¦
URAN Publishing Service
2023-08-05 05:06:35
(2 years ago)
170.254.145.210 - - [05/Aug/2023:08:06:26 +0300] "GET /wp-login.php HTTP/1.1" 404 4849 "-" "Mozilla/ ...
show more
170.254.145.210 - - [05/Aug/2023:08:06:26 +0300] "GET /wp-login.php HTTP/1.1" 404 4849 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
170.254.145.210 - - [05/Aug/2023:08:06:29 +0300] "GET /xmlrpc.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
...
show less
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown π©
Recently Reported IPs: