JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.56.56

64.112.56.56 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 66%: ?

66%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.56.56

Whois 64.112.56.56

IP Abuse Reports for 64.112.56.56:

This IP address has been reported a total of 17 times from 10 distinct sources. 64.112.56.56 was first reported on July 8th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 COMAITE	2026-07-10 16:03:25 (2 hours ago)	SQL injection attempt from 64.112.56.56.	Web App Attack
🇺🇸 ipblock.com	2026-07-10 11:50:00 (6 hours ago)	IPBlock protected site ID [4055-d][s=06]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2026-07-10 11:41:04 (6 hours ago)	hae-12 : Block return, carriage return, ... characters=>/plan-du-site?view=html'&amp(')	Hacking
🇦🇺 oncord	2026-07-10 11:13:55 (7 hours ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-07-09 22:23:02 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 18:22:40.988982 2026] [security2:error] [pid 8641:tid 8641] [client 64.112.56.56:56717] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fiyaplatform.com"] [uri "/.env.live"] [unique_id "alAfML2zd6WGwMULgGLG2wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 21:57:35 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 17:57:10.003913 2026] [security2:error] [pid 15366:tid 15366] [client 64.112.56.56:50007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wryemusings.com"] [uri "/.env"] [unique_id "alAZNtVuy6azr8gi--YKqQAAACw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 stinpriza	2026-07-09 20:40:10 (21 hours ago)	Web App Attack	Web App Attack
🇩🇪 FeG Deutschland	2026-07-09 20:28:32 (21 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 ipblock.com	2026-07-09 20:23:00 (21 hours ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 18:12:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 14:12:09.536536 2026] [security2:error] [pid 1950031:tid 1950031] [client 64.112.56.56:36407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psdinnersready.com"] [uri "/.env.live"] [unique_id "ak_keU3SllaIPvxNeP6L1gAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 KIDOS	2026-07-09 11:17:40 (1 day ago)	IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 10:48:59 (1 day ago)	(mod_security) mod_security (id:212620) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:212620) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 06:48:50.648214 2026] [security2:error] [pid 1109:tid 1109] [client 64.112.56.56:56791] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "3"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|thegoldentether.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /board/app.php/help/faq?sid=e70e073346e3079003afcee2303c0fa8'\\x22><script>alert(68752)</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "thegoldentether.com"] [uri "/board/app.php/help/faq"] [unique_id "ak98km4LPtMNz2zcS0L66QAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2026-07-09 03:37:23 (1 day ago)	Wordpress hacking attempt	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 02:04:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 22:04:20.873680 2026] [security2:error] [pid 18061:tid 18061] [client 64.112.56.56:40969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "indieheaven.io"] [uri "/.env.prod"] [unique_id "ak8BpEfdDKg5gmQs96gjUQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 01:29:14 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.112.56.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 21:29:06.519233 2026] [security2:error] [pid 248223:tid 248223] [client 64.112.56.56:40377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingscruff.com"] [uri "/.env.prod.local"] [unique_id "ak75YjkMWJ0ButHAlFMRkQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 176.120.22.16

🇧🇷 143.202.104.29

🇺🇸 142.111.152.24

🇫🇷 91.196.152.120

🇸🇬 43.156.3.248

🇺🇸 136.117.234.200

🇨🇳 120.48.163.155

🇨🇳 116.179.37.162

🇹🇭 113.53.211.151

🇭🇰 103.14.33.174

🇺🇸 50.6.228.111

🇬🇧 45.133.173.107

🇺🇸 15.204.156.170

🇨🇳 223.221.36.42

🇰🇷 211.253.31.30

🇹🇼 198.235.24.120

🇺🇸 136.112.77.171

🇮🇳 106.192.99.76

🇺🇸 74.7.229.154

🇪🇸 155.212.108.27