JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.56.131

64.112.56.131 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 92%: ?

92%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.56.131

Whois 64.112.56.131

IP Abuse Reports for 64.112.56.131:

This IP address has been reported a total of 29 times from 17 distinct sources. 64.112.56.131 was first reported on July 8th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 conseilgouz	2026-07-14 07:05:08 (7 hours ago)	vee-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/57-et-lart-subli ... show more vee-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/57-et-lart-sublime-le-design-automobile?catid=12&amp;Itemid=1029'&task=weblink.go(') show less	Hacking
🇫🇷 conseilgouz	2026-07-14 06:32:03 (8 hours ago)	sae-12 : Block return, carriage return, ... characters=>/component/finder/search?f=1'&amp(' ... show more sae-12 : Block return, carriage return, ... characters=>/component/finder/search?f=1'&amp(') show less	Hacking
🇫🇷 conseilgouz	2026-07-13 10:50:33 (1 day ago)	ame-12 : Block return, carriage return, ... characters=>/media/vendor/metismenujs/js/metismenujs.min ... show more ame-12 : Block return, carriage return, ... characters=>/media/vendor/metismenujs/js/metismenujs.min.js?1.4.0='(') show less	Hacking
🇩🇪 Vegascosmetics	2026-07-13 07:51:22 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 raph	2026-07-12 15:10:14 (1 day ago)	[001] honeypot form submission	Web Spam Blog Spam
🇺🇦 URAN Publishing Service	2026-07-11 20:46:34 (2 days ago)	64.112.56.131 - - [11/Jul/2026:23:46:33 +0300] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 404 46 ... show more 64.112.56.131 - - [11/Jul/2026:23:46:33 +0300] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 404 4673 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-11 19:41:05 (2 days ago)	64.112.56.131 - - [11/Jul/2026:22:39:04 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 404 ... show more 64.112.56.131 - - [11/Jul/2026:22:39:04 +0300] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 404 3290 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.131 - - [11/Jul/2026:22:41:04 +0300] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 404 4697 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 conseilgouz	2026-07-11 18:58:47 (2 days ago)	low-Joomla User : try to access forms...	Hacking
Anonymous	2026-07-11 18:28:32 (2 days ago)	[11/Jul/2026:20:51:03 +0300] 178379226394.514366 64.112.56.131 50765 148.251.76.218 443 [11/Jul/2026 ... show more [11/Jul/2026:20:51:03 +0300] 178379226394.514366 64.112.56.131 50765 148.251.76.218 443 [11/Jul/2026:21:28:30 +0300] 178379451061.820400 64.112.56.131 44017 148.251.76.218 443 show less	Web App Attack
🇺🇸 ipblock.com	2026-07-11 17:32:00 (2 days ago)	IPBlock protected site ID [4055-d][s=02]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇩🇪 louis77	2026-07-11 16:56:00 (2 days ago)	WordPress attack attempt - Path: /wp-content/plugins/dummyyummy/wp-signup.php, Method: GET, UA: Mozi ... show more WordPress attack attempt - Path: /wp-content/plugins/dummyyummy/wp-signup.php, Method: GET, UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 show less	Web App Attack Brute-Force
🇨🇿 ptlab	2026-07-11 12:45:38 (3 days ago)	Detected env_leak attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 12:07:54 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 08:07:34.315790 2026] [security2:error] [pid 5783:tid 5783] [client 64.112.56.131:52385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aupapierjaponais.com"] [uri "/.env.backup"] [unique_id "alIyBneWlFR6rMDNqHC3fQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mikekarl	2026-07-11 11:33:44 (3 days ago)	SQL INJECTION transfer_send_form''	SQL Injection
🇦🇺 oncord	2026-07-11 06:37:47 (3 days ago)	Form spam	Web Spam

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 83.168.106.26

🇧🇬 78.128.113.74

🇫🇷 51.91.238.244

🇦🇴 196.249.229.22

🇷🇺 185.209.84.234

🇺🇸 162.216.149.28

🇺🇸 157.245.1.7

🇫🇷 85.217.140.9

🇧🇬 79.124.62.230

🇵🇰 59.103.218.26

🇳🇱 45.148.10.141

🇬🇧 35.203.211.157

🇺🇸 34.182.240.14

🇷🇴 2.57.122.238

🇺🇸 2607:f8b0:4003:c1e::12c

🇺🇸 195.184.76.53

🇺🇸 136.107.225.228

🇨🇳 111.113.89.224

🇨🇦 85.217.149.72

🇸🇪 83.233.147.8