JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.56.136

64.112.56.136 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 76%: ?

76%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.56.136

Whois 64.112.56.136

IP Abuse Reports for 64.112.56.136:

This IP address has been reported a total of 29 times from 17 distinct sources. 64.112.56.136 was first reported on July 8th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 SilverZippo	2026-07-20 10:31:06 (2 days ago)	Web App Attack	Web App Attack
🇺🇸 ipblock.com	2026-07-17 13:07:00 (5 days ago)	IPBlock protected site ID [4055-d][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-17 10:03:00 (5 days ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 TheJimmo	2026-07-16 13:46:34 (6 days ago)	64.112.56.136 64.112.56.136 - - [16/Jul/2026:13:45:34 +0000] "PUT /_users/org.couchdb.user:poc HTTP/ ... show more 64.112.56.136 64.112.56.136 - - [16/Jul/2026:13:45:34 +0000] "PUT /_users/org.couchdb.user:poc HTTP/1.1" 404 13381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.136 64.112.56.136 - - [16/Jul/2026:13:45:35 +0000] "GET /upgrade_handle.php?cmd=writeuploaddir&uploaddir=%27;id;%27 HTTP/1.1" 404 13419 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.136 64.112.56.136 - - [16/Jul/2026:13:45:37 +0000] "GET /free_time.cgi HTTP/1.1" 404 13358 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.136 64.112.56.136 - - [16/Jul/2026:13:45:39 +0000] "GET /jQuery-File-Upload/server/php/index.php/files/kGcBFQ8n.php HTTP/1.1" 404 13448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537. ... show less	Bad Web Bot Web App Attack
🇮🇩 bps-statistics	2026-07-15 22:01:07 (6 days ago)	WP Admin Scan Activities: "2026-07-16T05:01:07.996+07:00" "/wp-admin/images/about.php" "64.112.56.13 ... show more WP Admin Scan Activities: "2026-07-16T05:01:07.996+07:00" "/wp-admin/images/about.php" "64.112.56.136" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-07-15 14:36:58 (1 week ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/admin-ajax.php	Web App Attack
🇩🇪 conseilgouz	2026-07-14 07:03:47 (1 week ago)	vee-12 : Block return, carriage return, ... characters=>/plan-du-site?view=html'&amp(')	Hacking
🇫🇷 conseilgouz	2026-07-14 06:33:51 (1 week ago)	sce-12 : Block return, carriage return, ... characters=>/media/vendor/jquery/js/jquery-noconflict.mi ... show more sce-12 : Block return, carriage return, ... characters=>/media/vendor/jquery/js/jquery-noconflict.min.js?3.7.1='(') show less	Hacking
🇺🇦 URAN Publishing Service	2026-07-11 20:47:52 (1 week ago)	64.112.56.136 - - [11/Jul/2026:23:46:33 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTT ... show more 64.112.56.136 - - [11/Jul/2026:23:46:33 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 4674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.136 - - [11/Jul/2026:23:47:50 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 4673 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 conseilgouz	2026-07-11 18:58:46 (1 week ago)	loe-11 : Block illegal characters=>/component/users/remind?Itemid=101javascript:alert(qsxss9k7z)//(a ... show more loe-11 : Block illegal characters=>/component/users/remind?Itemid=101javascript:alert(qsxss9k7z)//(alert(alert) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-11 17:49:53 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 13:49:31.435232 2026] [security2:error] [pid 19869:tid 19869] [client 64.112.56.136:60961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.chatgptfrance.net"] [uri "/.env"] [unique_id "alKCK1Sv5aaVOf26pNYr6wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-11 17:46:00 (1 week ago)	IPBlock protected site ID [4055-d][s=02]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇩🇪 louis77	2026-07-11 16:56:00 (1 week ago)	WordPress attack attempt - Path: /wp-content/gallery/about.php, Method: GET, UA: Mozilla/5.0 (Macint ... show more WordPress attack attempt - Path: /wp-content/gallery/about.php, Method: GET, UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 show less	Web App Attack Brute-Force
🇨🇿 ptlab	2026-07-11 12:45:37 (1 week ago)	Detected env_leak attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 10:18:41 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 06:18:18.286031 2026] [security2:error] [pid 9736:tid 9736] [client 64.112.56.136:47175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aupapierjaponais.com"] [uri "/.env.development.local"] [unique_id "alIYarVjvVUX8ybAX1RrEgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.44.96.202

🇺🇸 162.216.149.170

🇺🇸 50.62.22.47

🇩🇪 185.242.3.226

🇨🇳 175.6.179.51

🇧🇷 131.100.242.102

🇺🇸 66.132.186.210

🇨🇳 61.177.173.194

🇦🇷 45.177.128.75

🇧🇷 45.158.171.156

🇨🇳 36.129.147.206

🇬🇧 35.203.211.119

🇺🇸 204.217.128.118

🇺🇸 162.216.149.91

🇩🇪 160.200.105.10

🇮🇳 103.59.202.221

🇺🇸 66.132.186.195

🇨🇳 61.177.172.136

🇺🇸 45.79.181.94

🇻🇳 14.244.207.233