JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

173.245.211.140

Neutral Activity

Abuse confidence score ?

0% Low Risk

75 reports

32 reporters · latest 3 months ago

ISP	Strong Technology, LLC.
Usage Type	Commercial
ASN	AS62651
Domain Name	strongtechnology.net
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

173.245.211.140 has been reported 75 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 173.245.211.140

Export CSV

This IP address has been reported a total of 75 times from 32 distinct sources. 173.245.211.140 was first reported on January 8th 2021, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-06-29 07:19:31 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 SpaceHost-Server	2026-05-29 22:28:31 (4 months ago)		Brute-Force Web App Attack
🇩🇪 macrob	2026-05-29 20:58:39 (4 months ago)	2026/05/29 20:58:35 [error] 44359#44359: 266376348 access forbidden by rule, client: 173.245.211.14 ... show more 2026/05/29 20:58:35 [error] 44359#44359: 266376348 access forbidden by rule, client: 173.245.211.140, server: binixo.com.ar, request: "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.7' HTTP/2.0", host: "binixo.com.ar" 2026/05/29 20:58:36 [error] 44359#44359: 266376372 access forbidden by rule, client: 173.245.211.140, server: binixo.com.ar, request: "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.7''_ HTTP/2.0", host: "binixo.com.ar" 2026/05/29 20:58:37 [error] 44360#44360: 266376392 access forbidden by rule, client: 173.245.211.140, server: binixo.com.ar, request: "GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.9.1' HTTP/2.0", host: "binixo.com.ar" ... show less	Web App Attack
Anonymous	2026-05-29 19:45:53 (4 months ago)	<comment>	Web App Attack
🇬🇧 consul.to	2026-05-29 19:25:08 (4 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-03-23 02:26:07 (6 months ago)	(mod_security) mod_security triggered on hostname [redacted] 173.245.211.140 (BR/Brazil/173-245-211- ... show more (mod_security) mod_security triggered on hostname [redacted] 173.245.211.140 (BR/Brazil/173-245-211-140.gru.as62651.net) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-03-23 02:25:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 173.245.211.140 (173-245-211-140.gru.as62651.ne ... show more (mod_security) mod_security (id:210492) triggered by 173.245.211.140 (173-245-211-140.gru.as62651.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 22:25:22.533008 2026] [security2:error] [pid 28440:tid 28448] [client 173.245.211.140:63199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abadie.com.uy"] [uri "/app/config/parameters.yml"] [unique_id "acCkkt5JVuJvJM3t1yXVWgAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-02 00:52:56 (7 months ago)	Blocked by UFW (TCP on 51413) Source port: 55340 TTL: 121 Packet length: 52 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 51413) Source port: 55340 TTL: 121 Packet length: 52 TOS: 0x00 This report (for 173.245.211.140) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2023-12-14 00:54:45 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 173.245.211.140 (173-245-211-140.sin.as54203.ne ... show more (mod_security) mod_security (id:225170) triggered by 173.245.211.140 (173-245-211-140.sin.as54203.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 13 19:54:39.958321 2023] [security2:error] [pid 14626] [client 173.245.211.140:47947] [client 173.245.211.140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|frootloops.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frootloops.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZXpST_v4hqaE0VMA9Ow5-gAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2023-08-31 00:21:13 (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/173.245.211.140 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/173.245.211.140 2023-08-30 00:34:26 //plex.tv:443 2023-08-30 00:34:25 //plex.tv:443 2023-08-30 00:35:28 //plex.tv:443 2023-08-30 00:36:41 //plex.tv:443 2023-08-30 00:35:12 //plex.tv:443 2023-08-30 00:34:56 //plex.tv:443 show less	Web App Attack
🇺🇸 TheMadBeaker	2023-05-29 13:42:34 (3 years ago)	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	Hacking SQL Injection
Anonymous	2023-05-09 22:52:03 (3 years ago)	port scan and connect, tcp 443 (https)	Port Scan
Anonymous	2023-04-17 07:09:58 (3 years ago)	port scan and connect, tcp 80 (http)	Port Scan
🇱🇺 Tha_14	2023-03-03 11:10:50 (3 years ago)	Incoming UDP Connection from 173.245.211.140 to port: 20473. Honeypot was triggered at 3/3/2023 13:1 ... show more Incoming UDP Connection from 173.245.211.140 to port: 20473. Honeypot was triggered at 3/3/2023 13:10:46. show less	Port Scan
Anonymous	2023-01-05 10:29:15 (3 years ago)	port scan and connect, tcp 443 (https)	Port Scan

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 200.138.46.150

🇳🇱 195.178.110.232

🇵🇱 195.136.4.6

🇳🇱 172.71.182.156

🇫🇮 147.185.133.99

🇨🇳 121.227.31.13

🇩🇪 109.160.32.151

🇩🇪 109.160.32.144

🇻🇳 103.137.184.227

🇷🇴 92.118.39.14

🇷🇺 88.205.172.170

🇷🇺 80.251.156.20

🇷🇴 80.94.92.55

🇩🇪 46.225.110.243

🇳🇱 45.148.10.141

🇸🇬 45.78.235.121

🇺🇸 43.135.149.32

🇸🇬 35.198.214.231

🇺🇸 20.127.150.73

🇬🇧 5.226.140.76