JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.215.173.152

200.215.173.152 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 42%: ?

42%

ISP	MKM Internet Solution Provider Ltda
Usage Type	Fixed Line ISP
ASN	AS262698
Hostname(s)	200-215-173-152.mkm.net.br
Domain Name	mkm.net.br
Country	🇧🇷 Brazil
City	Sao Jose, Santa Catarina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.215.173.152

Whois 200.215.173.152

IP Abuse Reports for 200.215.173.152:

This IP address has been reported a total of 23 times from 19 distinct sources. 200.215.173.152 was first reported on February 11th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Birdo	2026-07-06 13:09:41 (14 hours ago)	[Birdo SMB Honeypot] SMB unauthorized attempt	Exploited Host Brute-Force Port Scan Hacking
🇩🇪 iNetWorker	2026-07-02 15:10:48 (4 days ago)	firewall-block, port(s): 20636/udp	Port Scan
Anonymous	2026-07-01 23:44:49 (5 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇳🇱 BIV	2026-07-01 22:01:43 (5 days ago)	Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 40946. Automated tiered (T-Pot+ ... show more Honeypot multi-source hit. Sources: dshield:fw,tpot:Suricata. Ports: 40946. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇵🇱 nfsec.pl	2026-06-10 22:11:10 (3 weeks ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan
🇩🇪 milcraft.nl	2026-05-17 00:11:51 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇫🇷 Sklurk	2026-05-16 03:54:09 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-05-15 15:03:56 (1 month ago)	(mod_security) mod_security (id:217210) triggered by 200.215.173.152 (200-215-173-152.mkm.net.br): 1 ... show more (mod_security) mod_security (id:217210) triggered by 200.215.173.152 (200-215-173-152.mkm.net.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 11:03:47.305075 2026] [security2:error] [pid 21059:tid 21059] [client 200.215.173.152:41573] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|usa61waits.xyz\|F\|4"] [data "GET http://usa61waits.xyz HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "usa61waits.xyz"] [uri "/"] [unique_id "agc101As3Rh_E_s6qnpH1QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 milcraft.nl	2026-05-14 03:54:59 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇺🇸 nodepile	2026-05-11 03:40:15 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/fr ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/static/version1775170088/frontend/Smartwave/porto/en_US/js-translation.json ua='Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2617.1804 Safari/537.36') show less	Web App Attack Exploited Host
🇬🇧 PeravixGroup	2026-05-11 00:19:50 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 MPL	2026-04-26 00:19:16 (2 months ago)	tcp/17000 (12 or more attempts)	Port Scan
🇮🇩 hermawan	2026-04-15 10:27:20 (2 months ago)	04/15/2026-17:27:20.676352 [Drop] [] [1:3100002815:0] Suricata match TLS JA3 scan Uniq Zeek no 28 ... show more 04/15/2026-17:27:20.676352 [Drop] [] [1:3100002815:0] Suricata match TLS JA3 scan Uniq Zeek no 2815 with hash_e38341d16ea5e5427397e3194ad2a3f1 [**] [Classification: (null)] [Priority: 3] {TCP} 200.215.173.152:42600 -> 103.166.156.58:443 ... show less	Email Spam Hacking
🇮🇹 A000Z	2026-04-14 00:19:36 (2 months ago)	Fail2Ban: 200.215.173.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ... show more Fail2Ban: 200.215.173.152 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot
🇷🇴 INTEQ	2026-04-03 03:03:38 (3 months ago)	Web attack from 200.215.173.152	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.50.170.58

🇬🇧 204.217.245.206

🇳🇱 176.65.148.243

🇳🇱 81.19.216.125

🇹🇷 212.87.197.92

🇺🇸 209.50.162.193

🇧🇪 198.235.24.254

🇬🇧 194.50.235.144

🇬🇧 193.176.29.30

🇬🇧 193.176.29.20

🇬🇧 185.247.137.84

🇳🇴 185.243.218.230

🇩🇪 185.220.101.19

🇬🇧 185.216.145.183

🇨🇳 182.92.92.149

🇺🇸 181.215.65.205

🇮🇳 125.23.255.134

🇵🇰 111.68.107.91

🇺🇸 104.207.35.226

🇫🇷 91.231.89.51