JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.69.40.75

64.69.40.75 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 66%: ?

66%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	CoreExpress
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35916
Domain Name	coreexpress.net
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.69.40.75

Whois 64.69.40.75

IP Abuse Reports for 64.69.40.75:

This IP address has been reported a total of 29 times from 14 distinct sources. 64.69.40.75 was first reported on May 15th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-13 06:37:39 (10 hours ago)	Blocked by UFW (TCP on 38667) Source port: 36524 TTL: 55 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 38667) Source port: 36524 TTL: 55 Packet length: 60 TOS: 0x08 This report (for 64.69.40.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇽 Centynova Corp.	2026-06-10 12:11:30 (3 days ago)	Blocked by threat detection service. Centynova Security	Port Scan Email Spam Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-10 07:46:21 (3 days ago)	(mod_security) mod_security (id:211190) triggered by 64.69.40.75 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:211190) triggered by 64.69.40.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 03:46:16.301512 2026] [security2:error] [pid 30082:tid 30082] [client 64.69.40.75:15230] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|test.nationalccl.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /cgi-bin/help/index.php?help_file=../../../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.nationalccl.com"] [uri "/cgi-bin/help/index.php"] [unique_id "aikWSNw_-zcxtFBXmQ-2uwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-09 12:59:39 (4 days ago)	Blocked by UFW (TCP on 42387) Source port: 21646 TTL: 55 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 42387) Source port: 21646 TTL: 55 Packet length: 60 TOS: 0x00 This report (for 64.69.40.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-07 20:24:36 (5 days ago)	Aggressive web scan	Web App Attack
Anonymous	2026-06-07 04:32:42 (6 days ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇺🇸 TPI-Abuse	2026-06-07 02:00:28 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 64.69.40.75 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 64.69.40.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 22:00:24.665139 2026] [security2:error] [pid 32604:tid 32604] [client 64.69.40.75:42028] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 64.69.40.75 (+1 hits since last alert)\|lusineweb.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lusineweb.com"] [uri "/xmlrpc.php"] [unique_id "aiTQuNnIvES8SF-YWyLhPgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-06-06 18:33:39 (6 days ago)	Blocked by UFW (TCP on 53705) Source port: 37428 TTL: 56 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 53705) Source port: 37428 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 64.69.40.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 fbarela	2026-06-06 01:00:03 (1 week ago)	FortiGate SSL VPN login failures.	Brute-Force Hacking
🇺🇸 xmission.com	2026-06-05 11:41:39 (1 week ago)	Blocked by UFW (TCP on 52022) Source port: 39798 TTL: 55 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 52022) Source port: 39798 TTL: 55 Packet length: 60 TOS: 0x00 This report (for 64.69.40.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-04 08:54:59 (1 week ago)	Aggressive web scan	Web App Attack
🇺🇸 xmission.com	2026-06-04 06:12:19 (1 week ago)	Blocked by UFW (TCP on 50110) Source port: 13954 TTL: 56 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 50110) Source port: 13954 TTL: 56 Packet length: 60 TOS: 0x00 This report (for 64.69.40.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-03 04:38:19 (1 week ago)	Blocked by UFW (TCP on 34647) Source port: 52424 TTL: 55 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 34647) Source port: 52424 TTL: 55 Packet length: 60 TOS: 0x00 This report (for 64.69.40.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-01 08:06:59 (1 week ago)	Blocked by UFW (TCP on 38670) Source port: 42624 TTL: 55 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 38670) Source port: 42624 TTL: 55 Packet length: 60 TOS: 0x08 This report (for 64.69.40.75) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇪 cmbplf	2026-05-31 10:51:29 (1 week ago)	883 limiting connections by zone (3h15m59s)	DDoS Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 210.4.68.72

🇺🇸 200.10.45.193

🇬🇧 188.240.59.13

🇲🇽 187.251.123.104

🇮🇩 182.253.156.173

🇲🇴 182.93.50.90

🇸🇬 172.253.236.211

🇩🇪 167.94.146.77

🇺🇸 162.254.36.150

🇦🇴 154.116.254.157

🇺🇸 100.49.117.77

🇫🇷 51.68.34.131

🇷🇺 178.176.87.195

🇭🇰 172.71.218.228

🇨🇳 115.190.181.18

🇺🇸 82.108.66.56

🇺🇸 54.177.95.82

🇺🇸 52.167.144.59

🇺🇸 47.230.151.38

🇨🇳 14.103.10.167