JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.245.211.39

173.245.211.39 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 0%: ?

ISP	Strong Technology, LLC.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62651
Hostname(s)	173-245-211-39.gru.as62651.net
Domain Name	strongtechnology.net
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.245.211.39

Whois 173.245.211.39

IP Abuse Reports for 173.245.211.39:

This IP address has been reported a total of 63 times from 26 distinct sources. 173.245.211.39 was first reported on January 8th 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Bedios GmbH	2026-02-12 20:40:00 (5 months ago)	Wordpress hacking attempt	Web App Attack
🇩🇪 Hazzard	2026-02-12 20:27:04 (5 months ago)	(wordpress) Failed wordpress login from 173.245.211.39 (BR/Brazil/São Paulo/São Paulo/173-245-211-39 ... show more (wordpress) Failed wordpress login from 173.245.211.39 (BR/Brazil/São Paulo/São Paulo/173-245-211-39.gru.as62651.net/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇪 itsolon	2026-02-12 20:08:17 (5 months ago)	173.245.211.39 - - [12/Feb/2026:21:07:30 +0100] "POST /xmlrpc.php HTTP/1.1" 301 3723 "-" "Apache-Htt ... show more 173.245.211.39 - - [12/Feb/2026:21:07:30 +0100] "POST /xmlrpc.php HTTP/1.1" 301 3723 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)" 173.245.211.39 - - [12/Feb/2026:21:07:39 +0100] "GET /wp-login.php HTTP/1.1" 301 3727 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 173.245.211.39 - - [12/Feb/2026:21:07:47 +0100] "GET /wp-login.php HTTP/1.1" 200 14692 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 173.245.211.39 - - [12/Feb/2026:21:08:12 +0100] "POST /wp-login.php HTTP/1.1" 301 3727 "https://vonkuester.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 173.245.211.39 - - [12/Feb/2026:21:08:16 +0100] "POST /wp-login.php HTTP/1.1" 301 3727 "https://vonkuester.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0 ... show less	Web App Attack SSH
🇩🇪 FeG Deutschland	2026-02-12 20:03:53 (5 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 F242	2026-02-12 19:46:35 (5 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇳🇱 exxos	2025-08-29 08:03:01 (10 months ago)	Attacks with Bad user agents	Hacking
🇪🇸 10dencehispahard SL	2024-06-11 19:01:12 (2 years ago)	Unauthorized login attempts [ wordpress-xmlrpc, wordpress]	Brute-Force Web App Attack
🇵🇱 arthurius	2024-03-05 00:33:00 (2 years ago)	SSL VPN unauthorized attempt to log in to a random account.	VPN IP Hacking Brute-Force
🇺🇸 TPI-Abuse	2024-02-22 15:10:25 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 173.245.211.39 (173-245-211-39.sin.as54203.net) ... show more (mod_security) mod_security (id:210492) triggered by 173.245.211.39 (173-245-211-39.sin.as54203.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 22 10:10:18.228762 2024] [security2:error] [pid 30613] [client 173.245.211.39:38742] [client 173.245.211.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furballaudio.com"] [uri "/.git/config"] [unique_id "Zddj2vYKe94P9NjM4U9iRwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-22 11:33:22 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 173.245.211.39 (173-245-211-39.sin.as54203.net) ... show more (mod_security) mod_security (id:210492) triggered by 173.245.211.39 (173-245-211-39.sin.as54203.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 22 06:33:15.892591 2024] [security2:error] [pid 24189] [client 173.245.211.39:60364] [client 173.245.211.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "procarehhc.com"] [uri "/.git/config"] [unique_id "Zdcw-x36SSBNCUXMGv0gxgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-25 23:10:57 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 173.245.211.39 (173-245-211-39.sin.as54203.net) ... show more (mod_security) mod_security (id:225170) triggered by 173.245.211.39 (173-245-211-39.sin.as54203.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 25 18:10:52.340764 2023] [security2:error] [pid 6358] [client 173.245.211.39:58469] [client 173.245.211.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|scotts.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scotts.net"] [uri "/wp/wp-json/wp/v2/users/"] [unique_id "ZYoL_EI30NJD2sOJX4R86wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 jhuisi	2023-11-13 15:42:19 (2 years ago)		Web App Attack
Anonymous	2023-03-23 17:56:54 (3 years ago)	port scan and connect, tcp 443 (https)	Port Scan
Anonymous	2023-03-17 18:05:23 (3 years ago)	port scan and connect, tcp 80 (http)	Port Scan
Anonymous	2023-03-15 17:42:06 (3 years ago)	port scan and connect, tcp 80 (http)	Port Scan

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.213.129.46

🇮🇪 212.129.77.148

🇻🇪 154.41.185.238

🇳🇱 2a0b:8bc0:2:b1ee::1

🇺🇸 216.24.210.124

🇧🇷 200.34.234.99

🇲🇽 187.189.159.230

🇨🇳 183.6.64.180

🇧🇷 177.37.180.101

🇺🇸 135.237.126.217

🇰🇪 102.217.120.98

🇷🇺 88.206.10.187

🇹🇷 87.232.127.53

🇳🇱 45.148.10.151

🇺🇸 216.24.210.123

🇰🇿 212.154.234.9

🇻🇳 210.245.20.230

🇹🇭 202.29.220.106

🇦🇷 201.179.52.11

🇧🇴 192.223.121.221