JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.53.202.133

200.53.202.133 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 43%: ?

43%

ISP	Redfox Telecomunicações Ltda.
Usage Type	Fixed Line ISP
ASN	AS262807
Hostname(s)	200.53.202.133.redfoxtelecom.com.br
Domain Name	redfoxtelecom.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.53.202.133

Whois 200.53.202.133

IP Abuse Reports for 200.53.202.133:

This IP address has been reported a total of 10 times from 8 distinct sources. 200.53.202.133 was first reported on April 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-18 01:50:14 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-18 01:42:23 (1 day ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-18 00:30:41 (1 day ago)	(xmlrpc) Failed xmlrpc access from 200.53.202.133 (BR/Brazil/200.53.202.133.redfoxtelecom.com.br): 5 ... show more (xmlrpc) Failed xmlrpc access from 200.53.202.133 (BR/Brazil/200.53.202.133.redfoxtelecom.com.br): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-18 00:03:51 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 200.53.202.133 (200.53.202.133.redfoxtelecom.co ... show more (mod_security) mod_security (id:240335) triggered by 200.53.202.133 (200.53.202.133.redfoxtelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 20:03:47.078005 2026] [security2:error] [pid 13374:tid 13374] [client 200.53.202.133:48175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 200.53.202.133 (+1 hits since last alert)\|riser-astrology.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "riser-astrology.com"] [uri "/xmlrpc.php"] [unique_id "alrC48lqu1iaTK4lcSSXKQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 18:06:06 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 200.53.202.133 (200.53.202.133.redfoxtelecom.co ... show more (mod_security) mod_security (id:240335) triggered by 200.53.202.133 (200.53.202.133.redfoxtelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 14:06:01.214577 2026] [security2:error] [pid 19950:tid 19950] [client 200.53.202.133:48994] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 200.53.202.133 (+1 hits since last alert)\|feiz.church\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "feiz.church"] [uri "/xmlrpc.php"] [unique_id "alkdicb5-7A4yzWrymVumgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oralunal	2026-07-16 18:03:22 (2 days ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
Anonymous	2026-07-16 17:34:14 (2 days ago)	(wordpress) Failed wordpress login from 200.53.202.133 (BR/Brazil/200.53.202.133.redfoxtelecom.com.b ... show more (wordpress) Failed wordpress login from 200.53.202.133 (BR/Brazil/200.53.202.133.redfoxtelecom.com.br) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-16 16:06:53 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 200.53.202.133 (200.53.202.133.redfoxtelecom.co ... show more (mod_security) mod_security (id:240335) triggered by 200.53.202.133 (200.53.202.133.redfoxtelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 12:06:44.183039 2026] [security2:error] [pid 29100:tid 29206] [client 200.53.202.133:48291] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 200.53.202.133 (+1 hits since last alert)\|culturallyyours.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "culturallyyours.org"] [uri "/xmlrpc.php"] [unique_id "alkBlKAfhAoJeoLeCEKbVgAAARQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Threat.live	2026-05-18 05:55:11 (2 months ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 MPL	2026-04-20 03:32:34 (2 months ago)	tcp/443 (42 or more attempts)	Port Scan

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 186.64.123.124

🇵🇰 153.117.8.231

🇺🇸 20.169.83.101

🇺🇸 20.84.144.113

🇺🇸 172.174.21.250

🇧🇩 103.190.133.30

🇺🇸 47.251.13.59

🇸🇬 47.84.104.148

🇨🇳 36.27.63.149

🇺🇸 20.12.214.177

🇺🇸 216.226.77.30

🇧🇷 201.16.238.49

🇳🇱 185.224.128.16

🇮🇩 179.65.209.122

🇺🇸 162.216.149.214

🇧🇬 91.148.190.150

🇩🇪 54.38.220.210

🇳🇱 45.198.224.60

🇳🇱 45.148.10.147

🇹🇼 34.81.36.168