JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

201.75.169.63

Activity Trending Down

Abuse Confidence Score

24% Elevated

24 reports

17 reporters · latest 2 weeks ago

ISP: Claro NXT Telecomunicacoes Ltda
Usage Type: Fixed Line ISP
ASN: AS28573
Hostname(s): c94ba93f.virtua.com.br
Domain Name: claro.com.br
Country: 🇧🇷 Brazil
City: Sao Jose dos Campos, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

24 from 17 distinct reporters

First reported

January 17th 2025

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 1 🇮🇳 India 1

Most common categories Web App Attack 4 Bad Web Bot 3 Brute-Force 2 Port Scan 2 Hacking 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 02:57:27 UTC · (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 201.75.169.63 (c94ba93f.virtua.com.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 22:57:23.648781 2026] [security2:error] [pid 22315:tid 22315] [client 2 ... show more (mod_security) mod_security (id:225170) triggered by 201.75.169.63 (c94ba93f.virtua.com.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 22:57:23.648781 2026] [security2:error] [pid 22315:tid 22315] [client 201.75.169.63:21792] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dd214chronicle.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dd214chronicle.org"] [uri "/wp-json/wp/v2/users"] [unique_id "atl7k7BkljUGygDwdeKXFAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-10-20 04:41:41 UTC · (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-20 02:54:40 UTC · (2 weeks ago)	Web exploit attempt \| method: POST, GET \| path: /wp-login.php \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36	Hacking Web App Attack
Anonymous	2026-10-14 17:08:50 UTC · (3 weeks ago)	MikroTik Enterprise Honeypot	Port Scan
🇺🇸 TPI-Abuse	2026-10-13 21:13:27 UTC · (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 201.75.169.63 (c94ba93f.virtua.com.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:13:21.080573 2026] [security2:error] [pid 3254:tid 3254] [client 201 ... show more (mod_security) mod_security (id:225170) triggered by 201.75.169.63 (c94ba93f.virtua.com.br): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:13:21.080573 2026] [security2:error] [pid 3254:tid 3254] [client 201.75.169.63:11918] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|robinsnestingplace.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "robinsnestingplace.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as6e8af9ulKSPIkmUZ3UkgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇵 radheykrishna.com.np	2026-10-07 11:14:19 UTC · (1 month ago)	Oct 7 16:59:18 kernel: [276808.116905] [UFW BLOCK] IN=ens160 OUT= SRC=201.75.169.63 LEN=1173 TOS=0x00 PREC=0x00 TTL=52 ID=14512 DF PROTO=UDP SPT=19528 DPT=21613 LEN=1153 ...	Port Scan
Anonymous	2026-09-03 22:08:59 UTC · (2 months ago)	MikroTik Enterprise Honeypot	Port Scan
🇵🇱 bart@	2026-08-29 10:24:56 UTC · (2 months ago)	Automated scan detection against redacted protected targets. Hits=1; port 38887 proto 17 detection dark_ip	Port Scan
Anonymous	2026-08-27 18:31:27 UTC · (2 months ago)	denied traffic to a honeypot network. destination port 29040.	Port Scan Hacking
🇩🇪 Admins@FBN	2026-08-26 09:09:50 UTC · (2 months ago)	FW-PortScan: Traffic Blocked srcport=4586 dstport=53	DNS Poisoning Port Scan Hacking
🇫🇷 Zkillu	2026-08-19 22:11:44 UTC · (2 months ago)	UDP flood (DDoS) vs AS215599: 46 pkts / 0.07 MB to UDP 8443 across 43 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. E ... show more UDP flood (DDoS) vs AS215599: 46 pkts / 0.07 MB to UDP 8443 across 43 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 HaloAgencySAS	2026-08-19 22:11:44 UTC · (2 months ago)	UDP flood (DDoS) vs AS215599: 46 pkts / 0.07 MB to UDP 8443 across 43 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. E ... show more UDP flood (DDoS) vs AS215599: 46 pkts / 0.07 MB to UDP 8443 across 43 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇮🇳 Mr.Singh	2026-08-19 15:30:38 UTC · (2 months ago)	NFT blocked 201.75.169.63 on 19-Aug-2026..	Port Scan Brute-Force
Anonymous	2026-08-16 22:33:50 UTC · (2 months ago)	39392/udp (1 or more attempts)	Port Scan
🇺🇸 KelvaTLS	2026-08-16 11:24:11 UTC · (2 months ago)	KelvaTLS: TCP connection-limit abuse against TCP port 1194 on our infrastructure. nft veil1194off_conn: held more concurrent connections to the OpenVPN listener than the per-source limit permits from this source. UTC 2026-08-16T11:24:11Z. incident ke ... show more KelvaTLS: TCP connection-limit abuse against TCP port 1194 on our infrastructure. nft veil1194off_conn: held more concurrent connections to the OpenVPN listener than the per-source limit permits from this source. UTC 2026-08-16T11:24:11Z. incident kelva-20260816-112018Z. show less	DDoS Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2a03:2880:f806:3e::

🇰🇷 118.40.56.162

🇳🇱 109.160.32.169

🇸🇬 23.97.62.119

🇺🇸 2600:1f1c:a8f:a800:5992:5470:321b:8aae

🇨🇳 219.151.7.106

🇸🇪 217.208.90.253

🇺🇿 95.214.211.156

🇺🇸 91.230.168.22

🇺🇸 66.132.159.108

🇦🇿 37.114.176.89

🇧🇪 34.140.69.197

🇺🇸 23.251.34.84

🇺🇸 23.95.122.72

🇺🇸 23.29.118.224

🇺🇸 2a03:2880:f814:47::

🇮🇩 2406:da19:cdc:7801:888f:f276:dfd9:fc38

🇨🇳 223.247.218.112

🇨🇳 223.75.156.89

🇺🇸 147.185.132.81