AbuseIPDB » 201.75.170.216
201.75.170.216
This IP was reported 9 times. Confidence of
Abuse
is 39% : ?
ISP
Claro NXT Telecomunicacoes Ltda
Usage Type
Fixed Line ISP
ASN
AS28573
Domain Name
claro.com.br
Country
๐ง๐ท
Brazil
City
Sao Jose dos Campos, Sao Paulo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 201.75.170.216 :
This IP address has been reported a total of
9
times from
7 distinct
sources.
201.75.170.216 was first reported on
September 8th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฌ๐ง
gigatech
2026-10-15 01:45:08
(1 day ago)
Webserver Probing
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 09:39:31
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 201.75.170.216 (c94baad8.virtua.com.br): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 201.75.170.216 (c94baad8.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:39:22.858589 2026] [security2:error] [pid 6936:tid 6936] [client 201.75.170.216:21215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||whodatnation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "whodatnation.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as38SohyXkzF-MlQx0MHbgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-09 11:09:14
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐จ๐ญ
ALPHANET
2026-10-01 07:06:13
(2 weeks ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
๐จ๐ฟ
Countryman
2026-09-29 00:10:02
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-24 20:40:36
(3 weeks ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ซ๐ท
Tilellit.PRO
2026-09-20 06:06:33
(3 weeks ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-17 14:12:55
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.75.170.216 (c94baad8.virtua.com.br): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 201.75.170.216 (c94baad8.virtua.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 10:12:29.573668 2026] [security2:error] [pid 26602:tid 26602] [client 201.75.170.216:13281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scotts.vccemail.net"] [uri "/site/.env.development"] [unique_id "aqv1TdYxiQClnM_W3aiSFgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-08 11:36:43
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
show less
Bad Web Bot
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: