JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.53.207.52

200.53.207.52 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 41%: ?

41%

ISP	Redfox Telecomunicações Ltda.
Usage Type	Fixed Line ISP
ASN	AS262807
Domain Name	redfoxtelecom.com.br
Country	🇧🇷 Brazil
City	Guarulhos, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.53.207.52

Whois 200.53.207.52

IP Abuse Reports for 200.53.207.52:

This IP address has been reported a total of 13 times from 8 distinct sources. 200.53.207.52 was first reported on April 20th 2026, and the most recent report was 51 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jsjdmediallc	2026-07-04 01:00:07 (51 minutes ago)	Auto-blocked: score 406 (threshold 10). Tier: HIGH. Hits: 80. Flags: xmlrpc, xmlrpc-burst, single-pa ... show more Auto-blocked: score 406 (threshold 10). Tier: HIGH. Hits: 80. Flags: xmlrpc, xmlrpc-burst, single-path-flood. Paths: /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php, /xmlrpc.php show less	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-03 23:18:39 (2 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇳🇱 ConsulHosting	2026-07-03 22:48:43 (3 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:34:32 (6 hours ago)	(mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com. ... show more (mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:34:27.936273 2026] [security2:error] [pid 25612:tid 25612] [client 200.53.207.52:36891] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 200.53.207.52 (+1 hits since last alert)\|monmouthcountydanceclasses.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "monmouthcountydanceclasses.com"] [uri "/xmlrpc.php"] [unique_id "akgOw_ZRrtTRpvqrH41QHQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 19:03:02 (6 hours ago)	(mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com. ... show more (mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:02:54.187646 2026] [security2:error] [pid 10903:tid 10997] [client 200.53.207.52:46064] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 200.53.207.52 (+1 hits since last alert)\|rubenluis.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rubenluis.com"] [uri "/xmlrpc.php"] [unique_id "akgHXiDGidLkM-qYcAWXdwAAANg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 17:31:13 (8 hours ago)	(mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com. ... show more (mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 13:31:06.650766 2026] [security2:error] [pid 8281:tid 8281] [client 200.53.207.52:22954] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 200.53.207.52 (+1 hits since last alert)\|centrodentalsindolor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "centrodentalsindolor.com"] [uri "/xmlrpc.php"] [unique_id "akfx2hh3CrWrnDitI7M8ggAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marc	2026-07-03 03:53:43 (21 hours ago)	200.53.207.52 - - [03/Jul/2026:05:53:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3465 "-" "Jetpack by ... show more 200.53.207.52 - - [03/Jul/2026:05:53:21 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3465 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" 200.53.207.52 - - [03/Jul/2026:05:53:31 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3466 "-" "WordPress.com; https://wordpress.com" 200.53.207.52 - - [03/Jul/2026:05:53:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3466 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 03:26:04 (22 hours ago)	(mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com. ... show more (mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 23:25:59.099905 2026] [security2:error] [pid 7967:tid 7967] [client 200.53.207.52:55449] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 200.53.207.52 (+1 hits since last alert)\|dokuzadabirdeniz.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dokuzadabirdeniz.com"] [uri "/xmlrpc.php"] [unique_id "akcrx0l05ciaYiPlicCf1QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-02 23:04:31 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 konseptit	2026-07-02 22:04:01 (1 day ago)	(wordpress) Failed wordpress login from 200.53.207.52 (BR/Brazil/200.53.207.52.redfoxtelecom.com.br)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-02 19:33:05 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com. ... show more (mod_security) mod_security (id:240335) triggered by 200.53.207.52 (200.53.207.52.redfoxtelecom.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 15:32:57.057538 2026] [security2:error] [pid 9411:tid 9422] [client 200.53.207.52:37532] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 200.53.207.52 (+1 hits since last alert)\|annacaird.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "annacaird.com"] [uri "/xmlrpc.php"] [unique_id "aka86cCG4CEikVCg1TgnrgAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-04-26 23:37:55 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇷🇴 INTEQ	2026-04-20 08:04:47 (2 months ago)	Web attack from 200.53.207.52	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.182

🇵🇾 190.128.201.18

🇯🇵 133.232.94.49

🇺🇸 104.237.145.228

🇺🇸 95.164.159.113

🇺🇸 95.164.159.111

🇳🇱 89.21.67.169

🇨🇦 51.79.99.235

🇳🇱 45.148.10.147

🇨🇦 23.252.224.216

🇧🇷 187.16.96.250

🇧🇷 179.248.114.13

🇺🇸 172.238.171.10

🇺🇸 162.216.150.30

🇵🇰 160.187.180.146

🇺🇸 147.185.132.210

🇺🇸 95.164.158.211

🇺🇸 95.164.158.65

🇺🇸 95.164.158.37

🇺🇸 64.62.156.152