JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.238.201.193

45.238.201.193 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 48%: ?

48%

ISP	TB TELECOM LTDA
Usage Type	Fixed Line ISP
ASN	AS268360
Hostname(s)	193-201-238-45.rev.provedorsuperconnect.com.br
Domain Name	mibasa.com.br
Country	🇧🇷 Brazil
City	Aracaju, Sergipe

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.238.201.193

Whois 45.238.201.193

IP Abuse Reports for 45.238.201.193:

This IP address has been reported a total of 16 times from 7 distinct sources. 45.238.201.193 was first reported on June 11th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-07-23 09:37:20 (1 hour ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 18:49:15 (15 hours ago)	(mod_security) mod_security (id:240335) triggered by 45.238.201.193 (193-201-238-45.rev.provedorsupe ... show more (mod_security) mod_security (id:240335) triggered by 45.238.201.193 (193-201-238-45.rev.provedorsuperconnect.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 14:49:07.190604 2026] [security2:error] [pid 6657:tid 6657] [client 45.238.201.193:62496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.238.201.193 (+1 hits since last alert)\|celebritybikinigossip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "celebritybikinigossip.com"] [uri "/xmlrpc.php"] [unique_id "amEQo0_vHeTl0ztX6ErcOAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-07-22 17:17:32 (17 hours ago)	(wordpress) Failed wordpress login from 45.238.201.193 (BR/Brazil/193-201-238-45.rev.provedorsuperco ... show more (wordpress) Failed wordpress login from 45.238.201.193 (BR/Brazil/193-201-238-45.rev.provedorsuperconnect.com.br) show less	Brute-Force
🇺🇸 cwytech	2026-07-22 16:45:02 (17 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 15:04:19 (19 hours ago)	(mod_security) mod_security (id:240335) triggered by 45.238.201.193 (193-201-238-45.rev.provedorsupe ... show more (mod_security) mod_security (id:240335) triggered by 45.238.201.193 (193-201-238-45.rev.provedorsuperconnect.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 11:04:13.348268 2026] [security2:error] [pid 1729151:tid 1729151] [client 45.238.201.193:61513] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.238.201.193 (+1 hits since last alert)\|greensandbeans.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greensandbeans.us"] [uri "/xmlrpc.php"] [unique_id "amDb7ZVbq1BE7OI04wFqWwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 14:43:10 (19 hours ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 12:00:21 (22 hours ago)	(mod_security) mod_security (id:240335) triggered by 45.238.201.193 (193-201-238-45.rev.provedorsupe ... show more (mod_security) mod_security (id:240335) triggered by 45.238.201.193 (193-201-238-45.rev.provedorsuperconnect.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 08:00:13.845367 2026] [security2:error] [pid 1214532:tid 1214532] [client 45.238.201.193:52204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.238.201.193 (+1 hits since last alert)\|salernospizza.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "salernospizza.com"] [uri "/xmlrpc.php"] [unique_id "amCwzb8Z7j_gSnlfRoEIHgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-21 18:33:35 (1 day ago)	(xmlrpc) Failed xmlrpc access from 45.238.201.193 (BR/Brazil/193-201-238-45.rev.provedorsuperconnect ... show more (xmlrpc) Failed xmlrpc access from 45.238.201.193 (BR/Brazil/193-201-238-45.rev.provedorsuperconnect.com.br): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-21 18:00:08 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 45.238.201.193 (193-201-238-45.rev.provedorsupe ... show more (mod_security) mod_security (id:240335) triggered by 45.238.201.193 (193-201-238-45.rev.provedorsuperconnect.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 14:00:01.307235 2026] [security2:error] [pid 233706:tid 233706] [client 45.238.201.193:61912] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 45.238.201.193 (+1 hits since last alert)\|hawaiivacations.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hawaiivacations.com"] [uri "/xmlrpc.php"] [unique_id "al-zofcyhJMmlWrcP57ZcAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 15:36:48 (5 days ago)	[redacted] 45.238.201.193 - - [17/Jul/2026:17:36:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 45.238.201.193 - - [17/Jul/2026:17:36:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site68887804.com" [redacted] 45.238.201.193 - - [17/Jul/2026:17:36:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.3; http://site59883452.com" [redacted] 45.238.201.193 - - [17/Jul/2026:17:36:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 45.238.201.193 - - [17/Jul/2026:17:36:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.1; http://site40416315.com" [redacted] 45.238.201.193 - - [17/Jul/2026:17:36:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site53825966.com" ... show less	Hacking Web App Attack
Anonymous	2026-07-17 14:15:00 (5 days ago)	[redacted] 45.238.201.193 - - [17/Jul/2026:16:14:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 45.238.201.193 - - [17/Jul/2026:16:14:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 45.238.201.193 - - [17/Jul/2026:16:14:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.4; http://site85146361.com" [redacted] 45.238.201.193 - - [17/Jul/2026:16:14:37 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 45.238.201.193 - - [17/Jul/2026:16:14:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site34728913.com" [redacted] 45.238.201.193 - - [17/Jul/2026:16:14:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
Anonymous	2026-06-29 15:39:48 (3 weeks ago)	[redacted] 45.238.201.193 - - [29/Jun/2026:17:39:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" " ... show more [redacted] 45.238.201.193 - - [29/Jun/2026:17:39:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 45.238.201.193 - - [29/Jun/2026:17:39:15 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.0; WordPress/6.4; http://site22665431.com" [redacted] 45.238.201.193 - - [29/Jun/2026:17:39:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 45.238.201.193 - - [29/Jun/2026:17:39:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 45.238.201.193 - - [29/Jun/2026:17:39:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/13.0; WordPress/6.2; http://site95827989.com" ... show less	Hacking Web App Attack
Anonymous	2026-06-25 17:15:43 (3 weeks ago)	[redacted] 45.238.201.193 - - [25/Jun/2026:19:14:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" " ... show more [redacted] 45.238.201.193 - - [25/Jun/2026:19:14:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 45.238.201.193 - - [25/Jun/2026:19:15:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 45.238.201.193 - - [25/Jun/2026:19:15:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.0; WordPress/6.2; http://site57321041.com" [redacted] 45.238.201.193 - - [25/Jun/2026:19:15:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.5; WordPress/6.3; http://site35297109.com" [redacted] 45.238.201.193 - - [25/Jun/2026:19:15:42 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
Anonymous	2026-06-18 13:12:12 (1 month ago)	[redacted] 45.238.201.193 - - [18/Jun/2026:15:11:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 45.238.201.193 - - [18/Jun/2026:15:11:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 45.238.201.193 - - [18/Jun/2026:15:11:37 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" [redacted] 45.238.201.193 - - [18/Jun/2026:15:11:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 45.238.201.193 - - [18/Jun/2026:15:11:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site66087319.com" [redacted] 45.238.201.193 - - [18/Jun/2026:15:12:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
Anonymous	2026-06-17 11:43:20 (1 month ago)	[redacted] 45.238.201.193 - - [17/Jun/2026:13:42:34 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1682 "-" ... show more [redacted] 45.238.201.193 - - [17/Jun/2026:13:42:34 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1682 "-" "Jetpack/12.1; WordPress/6.3; http://site36189902.com" [redacted] 45.238.201.193 - - [17/Jun/2026:13:42:45 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" [redacted] 45.238.201.193 - - [17/Jun/2026:13:42:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" [redacted] 45.238.201.193 - - [17/Jun/2026:13:43:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com" [redacted] 45.238.201.193 - - [17/Jun/2026:13:43:18 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.63.223.138

🇺🇸 195.184.76.67

🇨🇳 140.206.236.100

🇻🇳 116.110.149.203

🇺🇸 66.132.195.39

🇧🇪 198.235.24.135

🇺🇸 134.199.211.145

🇹🇼 111.70.49.182

🇲🇦 105.156.230.41

🇪🇸 83.41.84.182

🇺🇸 66.132.186.253

🇺🇸 64.62.156.122

🇺🇸 64.23.147.61

🇸🇬 45.78.201.248

🇬🇧 35.203.211.131

🇺🇸 35.146.155.199

🇨🇦 216.209.41.129

🇺🇸 207.90.244.26

🇬🇧 188.240.59.9

🇺🇸 162.216.150.78