JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 200.53.28.159

200.53.28.159 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 0%: ?

ISP	ACESSOLINE TELECOMUNICACOES LTDA
Usage Type	Fixed Line ISP
ASN	AS262391
Hostname(s)	200-53-28-159.acessoline.net.br
Domain Name	alt.com.br
Country	🇧🇷 Brazil
City	Mafra, Santa Catarina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 200.53.28.159

Whois 200.53.28.159

IP Abuse Reports for 200.53.28.159:

This IP address has been reported a total of 87 times from 43 distinct sources. 200.53.28.159 was first reported on November 24th 2020, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-02-28 21:29:03 (6 months ago)	NOQUEUE - IP: 200.53.28.159 - Feb 28 22:29:03 plesk postfix/smtpd[70499]: NOQUEUE: reject: RCPT fro ... show more NOQUEUE - IP: 200.53.28.159 - Feb 28 22:29:03 plesk postfix/smtpd[70499]: NOQUEUE: reject: RCPT from 200-53-28-159.acessoline.net.br[200.53.28.159]: 554 5.7.1 Service unavailable; Client host [200.53.28.159] blocked using dnsbl-1.uceprotect.net; IP 200.53.28.159 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=200.53.28.159; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<167-250-216-57.teleflex.net.br> show less	Email Spam
🇳🇱 Cloud86 B.V.	2026-02-21 21:13:02 (6 months ago)	categories: Email Spam	Email Spam
🇯🇵 Kinsei Engineering Inc.	2026-02-21 10:54:15 (6 months ago)	Postfix,Possible SPAM, Postscreen, Received incorrect commands at a high frequency.	Brute-Force Email Spam
🇩🇪 filstal.org	2026-02-11 15:10:47 (6 months ago)	CrowdSec-Report: crowdsecurity/postfix-spam	Email Spam Brute-Force
🇨🇦 polycoda	2026-02-06 12:20:31 (6 months ago)	📮 Sends email spam and/or tries to probe for a ton of inexistent email accounts to send spam to	Email Spam
🇷🇴 INTEQ	2025-12-28 10:44:54 (8 months ago)	SPAM from 200.53.28.159	Email Spam
🇨🇳 ThreatBook.io	2025-12-28 00:35:10 (8 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/200.53.28.159	SSH
🇨🇳 ThreatBook.io	2025-12-26 00:54:01 (8 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/200.53.28.159	SSH
🇳🇱 Cloud86 B.V.	2025-11-16 10:30:02 (9 months ago)	Email spam	Email Spam
🇺🇸 TPI-Abuse	2025-10-30 15:14:10 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 200.53.28.159 (200-53-28-159.acessoline.net.br) ... show more (mod_security) mod_security (id:225170) triggered by 200.53.28.159 (200-53-28-159.acessoline.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 11:14:03.829570 2025] [security2:error] [pid 1624:tid 1624] [client 200.53.28.159:59566] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQOAuziIdnbKzydNryKcggAAAAQ"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2025-10-11 17:55:58 (10 months ago)	200.53.28.159 (BR/Brazil/200-53-28-159.acessoline.net.br), 5 distributed SMTP Logins on account [acc ... show more 200.53.28.159 (BR/Brazil/200-53-28-159.acessoline.net.br), 5 distributed SMTP Logins on account [[email protected]] in the last 300 secs show less	Email Spam Brute-Force
🇮🇹 VHosting	2025-10-09 07:26:29 (10 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 TPI-Abuse	2025-09-10 14:06:08 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 200.53.28.159 (200-53-28-159.acessoline.net.br) ... show more (mod_security) mod_security (id:225170) triggered by 200.53.28.159 (200-53-28-159.acessoline.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 10:06:01.355827 2025] [security2:error] [pid 29844:tid 29844] [client 200.53.28.159:55930] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|321q.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "321q.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aMGFyephqsGOIvmVOmuh5AAAACY"], referer: https://321q.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-09-10 04:43:16 (11 months ago)	(From [email protected])	Phishing Web Spam
🇺🇸 nowyouknow	2025-09-07 16:44:29 (11 months ago)	(From [email protected])	Phishing Web Spam

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.93.89.86

🇧🇷 168.181.199.250

🇮🇳 103.159.85.90

🇳🇱 45.148.10.16

🇧🇪 198.235.24.193

🇳🇱 193.118.52.222

🇩🇪 185.104.184.228

🇺🇸 172.214.209.153

🇺🇸 147.185.132.245

🇦🇷 138.219.249.9

🇯🇵 124.45.25.45

🇧🇩 103.159.73.17

🇻🇳 103.159.54.61

🇻🇳 103.159.51.70

🇮🇳 103.158.40.65

🇷🇺 88.147.152.155

🇵🇰 59.103.216.144

🇯🇵 23.129.12.101

🇹🇼 198.235.24.98

🇫🇮 147.185.133.9