JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.23.19.75

201.23.19.75 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 29%: ?

29%

ISP	MAGAZINE LUIZA S/A
Usage Type	Data Center/Web Hosting/Transit
ASN	AS272432
Hostname(s)	201-23-19-75.br-se-1.user-content.mgc-public.net
Domain Name	magazineluiza.com.br
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.23.19.75

Whois 201.23.19.75

IP Abuse Reports for 201.23.19.75:

This IP address has been reported a total of 112 times from 41 distinct sources. 201.23.19.75 was first reported on April 18th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-31 23:13:28 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content ... show more (mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content.mgc-public.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 19:13:23.315823 2026] [security2:error] [pid 11413:tid 11413] [client 201.23.19.75:56192] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.integrabroadcast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.integrabroadcast.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahzAkz0_ReQp5tJEWaOgEAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇭 thaizone.com	2026-05-31 20:48:53 (2 weeks ago)	Brute-forcing login against websites (D1-1) #1	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-05-31 18:11:12 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content ... show more (mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content.mgc-public.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 14:11:06.934774 2026] [security2:error] [pid 12774:tid 12869] [client 201.23.19.75:38008] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.wnsi.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.wnsi.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ahx5uqthXAaOPpBMAyHiowAAAcs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-31 09:52:04 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content ... show more (mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content.mgc-public.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 05:51:59.009954 2026] [security2:error] [pid 6378:tid 6378] [client 201.23.19.75:58334] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|professionalpianomoversinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "professionalpianomoversinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahwEv87sccDiA9KQkmptXgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-31 00:49:19 (2 weeks ago)	[server.tmg.gr] httpd-suspicious-path: sites=crisis-management2019.eu; logs=/var/log/httpd/domains/c ... show more [server.tmg.gr] httpd-suspicious-path: sites=crisis-management2019.eu; logs=/var/log/httpd/domains/crisis-management2019.eu.log; samples=/?author=1 \| /wp-json/wp/v2/users \| /author/admin/ show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 22:12:40 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content ... show more (mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content.mgc-public.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 18:12:33.638368 2026] [security2:error] [pid 25365:tid 25365] [client 201.23.19.75:50960] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.ismaelcavazos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ismaelcavazos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahtg0YYW_vBAYvZ8Khm-kQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-29 01:35:59 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content ... show more (mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content.mgc-public.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 21:35:54.215357 2026] [security2:error] [pid 3711:tid 3711] [client 201.23.19.75:36788] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.tonytremblayauthor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tonytremblayauthor.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahjtekk40JtGroi_mwOCzQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-17 16:35:33 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content ... show more (mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content.mgc-public.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 12:35:29.467184 2026] [security2:error] [pid 29388:tid 29388] [client 201.23.19.75:34430] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.maffiniandbearce.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.maffiniandbearce.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agnuUcjeaBLTfHyjpkjomwAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-17 05:20:59 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content ... show more (mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content.mgc-public.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 01:20:54.338188 2026] [security2:error] [pid 30039:tid 30073] [client 201.23.19.75:57526] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.captechinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.captechinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aglQNoRUuwVetjtAcGOyNQAAAMA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-16 22:30:07 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content ... show more (mod_security) mod_security (id:225170) triggered by 201.23.19.75 (201-23-19-75.br-se-1.user-content.mgc-public.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 18:29:56.773780 2026] [security2:error] [pid 746:tid 746] [client 201.23.19.75:32828] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.havilahmalone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.havilahmalone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agjv5EtQuvePkiBat1yX_gAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NicoID	2026-05-03 00:16:24 (1 month ago)	201.23.19.75 - - [02/May/2026:12:48:54 -0600] "POST /xmlrpc.php HTTP/1.1" 200 444 "-" "Mozilla/5.0 ( ... show more 201.23.19.75 - - [02/May/2026:12:48:54 -0600] "POST /xmlrpc.php HTTP/1.1" 200 444 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" ... show less	Brute-Force
🇮🇹 LTM	2026-05-02 06:20:01 (1 month ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
🇺🇸 octageeks.com	2026-04-25 04:23:40 (1 month ago)	Wordpress malicious attack:[octausername]	Web App Attack
🇫🇷 masterguru	2026-04-24 15:08:35 (1 month ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-196)	Hacking
🇱🇻 garmtech.com	2026-04-24 11:27:35 (1 month ago)	IM360 WAF: Prohibited WordPress username login/registration	Web App Attack

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.65.202.199

🇳🇱 176.65.139.66

🇧🇬 79.124.40.126

🇳🇱 204.76.203.49

🇺🇸 188.241.177.233

🇨🇳 121.8.98.52

🇺🇸 107.175.135.100

🇱🇹 81.30.98.75

🇺🇸 69.116.94.225

🇬🇧 35.203.211.233

🇧🇷 205.210.31.226

🇭🇰 199.45.155.92

🇨🇳 180.159.42.86

🇫🇷 176.57.150.156

🇫🇮 147.185.133.125

🇺🇸 147.182.247.10

🇮🇶 37.236.163.88

🇬🇧 35.203.211.140

🇬🇧 35.203.210.194

🇰🇪 197.248.8.33