JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.56.168

64.112.56.168 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 100%: ?

100%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.56.168

Whois 64.112.56.168

IP Abuse Reports for 64.112.56.168:

This IP address has been reported a total of 64 times from 40 distinct sources. 64.112.56.168 was first reported on August 8th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-08-28 14:33:37 (5 hours ago)	28/Aug/2026:16:33:35.860732 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 28/Aug/2026:16:33:35.860732 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 64.112.56.168] ModSecurity: Warning. Matched phrase "etc/passwd" at REQUEST_COOKIES_NAMES:/bin/cat /etc/passwd. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "98"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: etc/passwd found within REQUEST_COOKIES_NAMES:/bin/cat /etc/passwd: /bin/cat /etc/passwd"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "elhacker.info"] [uri "/"] [unique_id "apGcP_j4LfHU8_nt3QXqJQANJRA"] ... show less	Hacking Web App Attack
Anonymous	2026-08-28 06:51:36 (13 hours ago)	64.112.56.168 arduino.ua [28/Aug/2026:09:51:35 +0300] "GET /wp-admin/images/about.php HTTP/2.0" 404 ... show more 64.112.56.168 arduino.ua [28/Aug/2026:09:51:35 +0300] "GET /wp-admin/images/about.php HTTP/2.0" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 0.000 2440 ... show less	Hacking SQL Injection Web App Attack
🇧🇷 Halux	2026-08-28 06:46:05 (13 hours ago)	64.112.56.168 Probing protected path or service	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-27 19:56:37 (1 day ago)	[27/Aug/2026:22:56:36 +0300] -- 64.112.56.168 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-i ... show more [27/Aug/2026:22:56:36 +0300] -- 64.112.56.168 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-includes/css/buttons.css HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-08-27 19:13:00 (1 day ago)	IPBlock protected site ID [4055-d][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-08-26 07:31:11 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇭 4server	2026-08-25 20:41:43 (2 days ago)	[TueAug2522:41:28.8936792026][security2:error][pid1432857:tid1433049][client64.112.56.168:0]ModSecur ... show more [TueAug2522:41:28.8936792026][security2:error][pid1432857:tid1433049][client64.112.56.168:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx\^0\$\"against\"REQUEST_HEADERS:Content-Length\"required.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"88\"][id\"392301\"][rev\"8\"][msg\"Atomicorp.comWAFRules:RequestContainingContent\,butMissingContent-Typeheader\"][severity\"NOTICE\"][tag\"no_ar\"][hostname\"giuristifriburgo.ch\"][uri\"/webadmin/auth/verification.php\"][unique_id\"ao39-LdSBn2Pou2zQF4_9wAAANA\"]\,referer:https://giuristifriburgo.ch/webadmin/start/ show less	Hacking Web App Attack
🇦🇺 foff	2026-08-25 17:08:11 (3 days ago)	Source IP: 64.112.56.168 (US/RCN). Web application attack detected by OWASP CRS (cross-site scriptin ... show more Source IP: 64.112.56.168 (US/RCN). Web application attack detected by OWASP CRS (cross-site scripting (XSS)). Attack observed 2026-08-26T03:08:11+10:00. show less	Web App Attack
🇮🇩 bps-statistics	2026-08-25 10:45:26 (3 days ago)	WP Admin Scan Activities: "2026-08-25T17:45:26.941+07:00" "/wp-admin/images/about.php" "64.112.56.16 ... show more WP Admin Scan Activities: "2026-08-25T17:45:26.941+07:00" "/wp-admin/images/about.php" "64.112.56.168" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" show less	Web App Attack
🇳🇱 Site.eu	2026-08-25 10:01:07 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 ipblock.com	2026-08-24 12:49:00 (4 days ago)	IPBlock protected site ID [4055-d][s=02]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-08-24 10:54:28 (4 days ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇩🇪 conseilgouz	2026-08-24 09:27:51 (4 days ago)	coe-12 : Block return, carriage return, ... characters=>/en/plan-du-site-2?view=html'&amp(' ... show more coe-12 : Block return, carriage return, ... characters=>/en/plan-du-site-2?view=html'&amp(') show less	Hacking
🇧🇪 cmbplf	2026-08-24 02:50:37 (4 days ago)	4.164 requests from abuseipdb.com blacklisted IP (11mos1w5d)	Brute-Force Bad Web Bot
🇺🇦 URAN Publishing Service	2026-08-23 23:15:53 (4 days ago)	[24/Aug/2026:02:15:52 +0300] -- 64.112.56.168 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env ... show more [24/Aug/2026:02:15:52 +0300] -- 64.112.56.168 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env.development.local HTTP/1.1 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.120

🇧🇷 177.155.133.175

🇦🇴 154.127.167.230

🇩🇪 150.241.70.245

🇺🇸 147.185.132.86

🇷🇴 92.118.39.77

🇧🇬 79.124.58.90

🇺🇸 34.134.58.178

🇰🇷 34.64.206.159

🇺🇸 34.24.43.46

🇧🇷 162.241.2.199

🇺🇸 162.216.150.54

🇮🇷 79.175.176.177

🇺🇸 54.218.40.208

🇳🇱 45.148.10.183

🇪🇹 196.188.93.169

🇹🇷 176.232.186.133

🇺🇸 147.185.132.85

🇧🇬 79.124.49.70

🇨🇦 70.77.41.25