JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.56.53

64.112.56.53 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 97%: ?

97%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.56.53

Whois 64.112.56.53

IP Abuse Reports for 64.112.56.53:

This IP address has been reported a total of 28 times from 19 distinct sources. 64.112.56.53 was first reported on May 23rd 2025, and the most recent report was 52 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TheJimmo	2026-07-16 13:47:13 (52 minutes ago)	64.112.56.53 64.112.56.53 - - [16/Jul/2026:13:45:34 +0000] "GET /theme/META-INF/%c0%ae%c0%ae/%c0%ae% ... show more 64.112.56.53 64.112.56.53 - - [16/Jul/2026:13:45:34 +0000] "GET /theme/META-INF/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.1" 404 13425 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.53 64.112.56.53 - - [16/Jul/2026:13:45:34 +0000] "GET /index.php?option=com_perchagallery&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 404 13581 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.53 64.112.56.53 - - [16/Jul/2026:13:45:37 +0000] "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 404 13414 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.56.53 64.112.56.53 - - [16/Jul/2026:13:45:39 +0000] "GET /objects/getImageMP4. ... show less	Bad Web Bot Web App Attack
🇫🇷 ✨	2026-07-16 01:01:14 (13 hours ago)	Domain : thesensorycompany.co.uk Rule : hack 2026-07-16 01:00:19 *hidden-privacy* GET /.env.bak ... show more Domain : thesensorycompany.co.uk Rule : hack 2026-07-16 01:00:19 *hidden-privacy* GET /.env.bak - 80 - 64.112.56.53 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 - www.thesensorycompany.co.uk 301 0 0 430 574 78 - - show less	Hacking SQL Injection Brute-Force
Anonymous	2026-07-15 14:36:57 (1 day ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/post.php%3Fpost=1&action=elemen ... show more [Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/post.php%3Fpost=1&action=elementor show less	Web App Attack
🇩🇪 FeG Deutschland	2026-07-15 02:29:43 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 Penny Packer	2026-07-15 01:09:45 (1 day ago)	Fail2Ban apache-tripwires	Web App Attack
🇩🇪 conseilgouz	2026-07-14 07:04:49 (2 days ago)	vee-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/44-autoliens?cat ... show more vee-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/44-autoliens?catid=11'&amp;Itemid=1029&task=weblink.go(') show less	Hacking
🇺🇸 ipblock.com	2026-07-14 04:04:00 (2 days ago)	IPBlock protected site ID [4055-d][s=01]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇩🇪 Hugopvigo	2026-07-13 22:08:05 (2 days ago)	"2026-07-13 22:08:05+00:00 64.112.56.53 IP con score alto (79) detectada en el log."	Brute-Force SSH
🇩🇪 conseilgouz	2026-07-13 16:08:05 (2 days ago)	mae-12 : Block return, carriage return, ... characters=>/index.php?view=article&amp;id=7:mention ... show more mae-12 : Block return, carriage return, ... characters=>/index.php?view=article&amp;id=7:mentions-legales'&amp;catid=2:non-categorise(') show less	Hacking
🇩🇪 Vegascosmetics	2026-07-13 11:05:52 (3 days ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇮🇹 Progetto1	2026-07-13 10:40:02 (3 days ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 raph	2026-07-12 15:10:15 (3 days ago)	[001] honeypot form submission	Web Spam Blog Spam
🇺🇸 TPI-Abuse	2026-07-12 03:38:43 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.53 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 23:38:22.255807 2026] [security2:error] [pid 15206:tid 15206] [client 64.112.56.53:42737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aabondwnc.com"] [uri "/.env.dev.local"] [unique_id "alMMLoLUE4PAWHQIZapbLQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2026-07-11 18:58:45 (4 days ago)	loe-11 : Block illegal characters=>/forum/topics/feed/mode-topics?format=feed&amp=%3Cscr%3Cscrip ... show more loe-11 : Block illegal characters=>/forum/topics/feed/mode-topics?format=feed&amp=%3Cscr%3Cscript%3Eipt%3Ealert(qsxss9k7z)%3C/scr%3C/script%3Eipt%3E(alert(alert) show less	Hacking
🇺🇸 ipblock.com	2026-07-11 18:18:00 (4 days ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 159.203.1.51

🇰🇷 112.184.4.156

🇹🇷 94.154.43.8

🇺🇸 91.124.187.200

🇺🇸 44.21.9.195

🇯🇵 40.115.140.228

🇺🇸 20.80.88.209

🇺🇸 137.184.13.100

🇰🇷 125.139.87.30

🇭🇰 114.111.54.189

🇨🇳 111.47.243.219

🇳🇬 105.117.21.96

🇬🇧 92.18.173.136

🇫🇷 91.231.89.136

🇳🇱 91.92.40.23

🇹🇷 78.190.159.90

🇳🇱 45.148.10.152

🇮🇩 36.64.131.68

🇹🇼 35.201.238.252

🇺🇸 34.171.242.153