JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.56.103

64.112.56.103 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 100%: ?

100%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.56.103

Whois 64.112.56.103

IP Abuse Reports for 64.112.56.103:

This IP address has been reported a total of 62 times from 36 distinct sources. 64.112.56.103 was first reported on August 8th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-08-28 14:33:38 (5 hours ago)	28/Aug/2026:16:33:36.629261 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 28/Aug/2026:16:33:36.629261 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 64.112.56.103] ModSecurity: Warning. Matched phrase "etc/passwd" at REQUEST_COOKIES_NAMES:/bin/cat /etc/passwd. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "98"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/passwd found within REQUEST_COOKIES_NAMES:/bin/cat /etc/passwd: /bin/cat /etc/passwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elhacker.info"] [uri "/cgi-bin/stats"] [unique_id "apGcQMyH2JeXr0e0gYEyQQANyXg"] ... show less	Hacking Web App Attack
Anonymous	2026-08-28 08:35:42 (11 hours ago)	64.112.56.103 - - [28/Aug/2026:02:56:45 -0300] "GET /wp-content/plugins/WordPressCore/ HTTP/2.0" 200 ... show more 64.112.56.103 - - [28/Aug/2026:02:56:45 -0300] "GET /wp-content/plugins/WordPressCore/ HTTP/2.0" 200 76722 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.103 - - [28/Aug/2026:04:08:38 -0300] "GET /wp-admin/images/about.php HTTP/2.0" 404 1807 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.103 - - [28/Aug/2026:05:35:41 -0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/2.0" 404 1807 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Port Scan
🇧🇷 Halux	2026-08-28 06:46:04 (13 hours ago)	64.112.56.103 Probing protected path or service	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-28 05:20:28 (14 hours ago)	[28/Aug/2026:08:20:28 +0300] -- 64.112.56.103 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env ... show more [28/Aug/2026:08:20:28 +0300] -- 64.112.56.103 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env.prod.local HTTP/1.1 show less	Bad Web Bot Web App Attack
🇮🇩 bps-statistics	2026-08-27 20:00:16 (23 hours ago)	Web Application Attacks	Web App Attack
🇺🇸 ipblock.com	2026-08-27 19:13:00 (1 day ago)	IPBlock protected site ID [4055-d][s=03]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-08-25 10:01:05 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇨🇭 4server	2026-08-25 09:54:44 (3 days ago)	[TueAug2511:54:29.6982762026][security2:error][pid3554654:tid3554956][client64.112.56.103:0]ModSecur ... show more [TueAug2511:54:29.6982762026][security2:error][pid3554654:tid3554956][client64.112.56.103:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^\?\\\\\\\\\(\?\\\\\\\\\)\?{\"atREQUEST_HEADERS:Referer.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"47\"][id\"330701\"][rev\"3\"][msg\"Atomicorp.comWAFRules:CVE-2014-6271BashAttack\"][severity\"ALERT\"][hostname\"gamotors.ch\"][uri\"/\"][unique_id\"ao1mVSx00Ktz8Mf2pbcj2wAAABE\"]\,referer:\(\){ignored\;}\;echoContent-Type:text/html\;echo\;/bin/cat/etc/passwd show less	Hacking Web App Attack
🇺🇸 ipblock.com	2026-08-24 12:49:00 (4 days ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-08-24 10:52:50 (4 days ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇩🇪 conseilgouz	2026-08-24 07:55:59 (4 days ago)	coe-11 : Block illegal characters=>/en/joomla-modules-plugin?id=2javascript:alert(qsxss9k7z)//(alert ... show more coe-11 : Block illegal characters=>/en/joomla-modules-plugin?id=2javascript:alert(qsxss9k7z)//(alert(alert) show less	Hacking
🇧🇪 cmbplf	2026-08-24 02:56:51 (4 days ago)	4.175 requests from abuseipdb.com blacklisted IP (10mos1w6d)	Brute-Force Bad Web Bot
🇺🇦 URAN Publishing Service	2026-08-23 23:27:41 (4 days ago)	[24/Aug/2026:02:27:40 +0300] -- 64.112.56.103 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env ... show more [24/Aug/2026:02:27:40 +0300] -- 64.112.56.103 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env.prod.local HTTP/1.1 show less	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-08-23 04:35:29 (5 days ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 ArturShelby	2026-08-22 12:58:03 (6 days ago)	Critical file access: /phpMyAdmin/	Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 82.158.225.92

🇬🇧 51.142.9.141

🇮🇪 20.234.5.29

🇺🇸 20.49.14.181

🇰🇷 1.247.245.61

🇺🇦 188.190.224.180

🇬🇧 172.187.248.77

🇭🇰 43.242.203.160

🇮🇱 20.217.205.203

🇨🇳 1.117.232.71

🇺🇸 172.184.169.204

🇺🇸 162.0.229.157

🇯🇵 118.107.13.11

🇨🇳 106.53.72.14

🇸🇬 103.250.11.156

🇩🇪 69.5.169.47

🇺🇸 40.126.29.14

🇩🇪 35.242.215.247

🇬🇧 35.203.211.244

🇩🇪 34.89.154.36