JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.56.145

64.112.56.145 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 95%: ?

95%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.56.145

Whois 64.112.56.145

IP Abuse Reports for 64.112.56.145:

This IP address has been reported a total of 29 times from 20 distinct sources. 64.112.56.145 was first reported on July 9th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TheJimmo	2026-07-16 13:47:41 (3 hours ago)	64.112.56.145 64.112.56.145 - - [16/Jul/2026:13:45:35 +0000] "GET /typo3conf/ext/restler/vendor/lura ... show more 64.112.56.145 64.112.56.145 - - [16/Jul/2026:13:45:35 +0000] "GET /typo3conf/ext/restler/vendor/luracast/restler/public/examples/resources/getsource.php?file=../../../../../../../LocalConfiguration.php HTTP/1.1" 404 13517 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.145 64.112.56.145 - - [16/Jul/2026:13:45:40 +0000] "GET /nette.micro/?callback=phpcredits HTTP/1.1" 404 13383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.145 64.112.56.145 - - [16/Jul/2026:13:45:42 +0000] "POST /EemAdminService/EemAdmin HTTP/1.1" 404 13375 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.145 64.112.56.145 - - [16/Jul/2026:13:45:44 +0000] "POST /wp-login.php HTTP/1.1" 404 13352 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-15 14:36:55 (1 day ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/admin-ajax.php%3Faction=easync_succ ... show more [Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/admin-ajax.php%3Faction=easync_success_and_save show less	Web App Attack
🇩🇪 conseilgouz	2026-07-14 07:04:05 (2 days ago)	vee-12 : Block return, carriage return, ... characters=>/media/mod_menu/js/menu.min.js?5a565f=' ... show more vee-12 : Block return, carriage return, ... characters=>/media/mod_menu/js/menu.min.js?5a565f='(') show less	Hacking
🇩🇪 Magnytu2	2026-07-14 07:01:58 (2 days ago)	tee-12 : Block return, carriage return, ... characters=>/media/system/js/messages.min.js?9a4811=&#03 ... show more tee-12 : Block return, carriage return, ... characters=>/media/system/js/messages.min.js?9a4811='(') show less	Hacking
🇫🇷 conseilgouz	2026-07-14 06:32:19 (2 days ago)	sae-12 : Block return, carriage return, ... characters=>/plugins/content/up/actions/image_gallery/li ... show more sae-12 : Block return, carriage return, ... characters=>/plugins/content/up/actions/image_gallery/lib/PhotoSwipe/photoswipe-ui-default.min.js?b776e2='(') show less	Hacking
🇨🇭 chr70	2026-07-13 15:57:00 (3 days ago)	Scanning for vulnerabilities	Web App Attack
🇩🇪 conseilgouz	2026-07-13 13:27:50 (3 days ago)	doe-12 : Block return, carriage return, ... characters=>/media/astroid/js/jquery.easing.min.js?4c94a ... show more doe-12 : Block return, carriage return, ... characters=>/media/astroid/js/jquery.easing.min.js?4c94a5='(') show less	Hacking
🇩🇪 Vegascosmetics	2026-07-13 09:54:51 (3 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-07-12 03:38:44 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.145 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 23:38:22.504503 2026] [security2:error] [pid 15257:tid 15257] [client 64.112.56.145:46353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aabondwnc.com"] [uri "/.env.stage"] [unique_id "alMMLrmjab5e8cinYZcJDQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-07-11 20:47:52 (4 days ago)	64.112.56.145 - - [11/Jul/2026:23:46:29 +0300] "GET /.env HTTP/1.1" 404 4679 "-" "Mozilla/5.0 (Macin ... show more 64.112.56.145 - - [11/Jul/2026:23:46:29 +0300] "GET /.env HTTP/1.1" 404 4679 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.145 - - [11/Jul/2026:23:47:50 +0300] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 4672 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-07-11 11:25:01 (5 days ago)	64.112.56.145 - - [11/Jul/2026:19:24:57 +0800] "GET /.env.development.local HTTP/1.1" 404 196 "-" "M ... show more 64.112.56.145 - - [11/Jul/2026:19:24:57 +0800] "GET /.env.development.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2026-07-11 11:20:30 (5 days ago)	Fail2Ban apache-tripwires	Web App Attack
Anonymous	2026-07-10 16:29:59 (6 days ago)	[10/Jul/2026:19:10:30 +0300] 178369983046.115092 64.112.56.145 51911 148.251.76.218 443 [10/Jul/2026 ... show more [10/Jul/2026:19:10:30 +0300] 178369983046.115092 64.112.56.145 51911 148.251.76.218 443 [10/Jul/2026:19:29:58 +0300] 178370099885.066815 64.112.56.145 56631 148.251.76.218 443 show less	Web App Attack
🇫🇷 COMAITE	2026-07-10 12:22:01 (6 days ago)	SQL injection attempt from 64.112.56.145.	Web App Attack
🇺🇸 ipblock.com	2026-07-10 11:50:00 (6 days ago)	IPBlock protected site ID [4055-d][s=02]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.132.172.100

🇧🇪 2600:1900:0:4303::f00

🇺🇸 216.73.216.202

🇨🇳 180.76.245.60

🇺🇸 154.92.23.249

🇨🇳 114.218.57.21

🇺🇸 91.230.168.51

🇳🇱 91.92.40.151

🇳🇱 89.105.197.195

🇺🇸 47.251.141.150

🇧🇪 198.235.24.212

🇳🇱 103.74.132.78

🇺🇸 66.132.172.224

🇮🇶 37.236.120.131

🇮🇳 2404:6800:4000:100c::125

🇩🇪 2400:8d60:4::ac6f:a055

🇺🇸 216.73.216.134

🇬🇪 193.24.126.136

🇨🇳 113.141.72.139

🇧🇩 103.179.198.19