JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.173.179.224

45.173.179.224 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 18%: ?

18%

ISP	Kobertura Telecom LTDA
Usage Type	Fixed Line ISP
ASN	AS268818
Domain Name	koberturatelecom.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.173.179.224

Whois 45.173.179.224

IP Abuse Reports for 45.173.179.224:

This IP address has been reported a total of 10 times from 9 distinct sources. 45.173.179.224 was first reported on January 30th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 bcsaba	2026-10-13 16:33:09 (3 days ago)	CMS (WordPress or Joomla) login attempt. 45.173.179.224 - - [13/Oct/2026:18:33:07 +0200] "POST /wp-l ... show more CMS (WordPress or Joomla) login attempt. 45.173.179.224 - - [13/Oct/2026:18:33:07 +0200] "POST /wp-login.php HTTP/2.0" 200 4277 "https://REDACTED/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 13:42:43 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 45.173.179.224 (45.173.179.224.koberturatelecom ... show more (mod_security) mod_security (id:225170) triggered by 45.173.179.224 (45.173.179.224.koberturatelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:42:38.387103 2026] [security2:error] [pid 2746:tid 2746] [client 45.173.179.224:49317] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kaylamaclaincounseling.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kaylamaclaincounseling.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asedzp8jt172Avr5bZvM6QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-03 23:30:38 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-03 14:24:03 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Tilellit.PRO	2026-08-03 06:00:08 (2 months ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇨🇦 DRI	2026-07-30 04:13:13 (2 months ago)	Unsolicited UDP traffic on Honeypot, srcport=45156 dstport=18755	Port Scan Hacking
Anonymous	2026-07-26 13:28:06 (2 months ago)	denied traffic to a non-approved destination port. destination port 48613.	Port Scan
🇮🇩 hermawan	2026-06-01 00:49:26 (4 months ago)	[Mon Jun 01 07:49:26.204676 2026] [authz_core:error] [pid 1508082:tid 140573376685760] [client 45.17 ... show more [Mon Jun 01 07:49:26.204676 2026] [authz_core:error] [pid 1508082:tid 140573376685760] [client 45.173.179.224:25497] AH01630: client denied by server configuration: /var/www/index.php [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1508103] [fjfnkGYC2+M] [ahzXFjFeo6EDlWpf79QdOgAAiBQ] keep_alive=[1] [2026-06-01 07:49:26.204680] [R:ahzXFjFeo6EDlWpf79QdOgAAiBQ] UA:'Mozilla/5.0 (Linux; Android 10; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36' Host:'staklim-jatim.bmkg.go.id:443' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7' Accept-Encoding:'gzip, deflate, br Accept-Language:'en-US,en;q=0.8 Upgrade-Insecure-Requests:'1 ... show less	Email Spam Hacking
🇳🇱 EGP Abuse Dept	2026-01-13 13:08:33 (9 months ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
Anonymous	2025-01-30 03:18:43 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇪 2a00:f29:258:11c1:50e4:8d5c:67:489d

🇬🇧 195.140.214.29

🇮🇩 103.187.165.26

🇬🇧 35.203.210.4

🇯🇵 34.85.42.89

🇰🇷 211.248.106.8

🇰🇷 211.106.133.202

🇺🇸 147.185.132.153

🇬🇧 35.203.211.147

🇧🇷 35.198.3.40

🇨🇳 27.223.98.117

🇺🇸 172.172.161.152

🇭🇰 107.150.123.48

🇺🇸 100.27.157.68

🇩🇪 51.89.59.44

🇺🇸 51.81.105.21

🇳🇱 45.148.10.141

🇺🇸 3.224.95.233

🇫🇷 212.47.69.211

🇷🇺 193.233.63.128