JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.57.149

64.112.57.149 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 86%: ?

86%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.57.149

Whois 64.112.57.149

IP Abuse Reports for 64.112.57.149:

This IP address has been reported a total of 24 times from 16 distinct sources. 64.112.57.149 was first reported on July 8th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 conseilgouz	2026-07-14 07:05:36 (12 hours ago)	vee-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/20-dynamic-tp?ca ... show more vee-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/20-dynamic-tp?catid=12'&amp(') show less	Hacking
🇫🇷 conseilgouz	2026-07-14 06:34:10 (12 hours ago)	sce-12 : Block return, carriage return, ... characters=>/media/system/js/messages.min.js?9a4811=&#03 ... show more sce-12 : Block return, carriage return, ... characters=>/media/system/js/messages.min.js?9a4811='(') show less	Hacking
🇺🇸 TPI-Abuse	2026-07-14 06:05:28 (13 hours ago)	(mod_security) mod_security (id:211190) triggered by 64.112.57.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211190) triggered by 64.112.57.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 02:05:10.033313 2026] [security2:error] [pid 14009:tid 14033] [client 64.112.57.149:39437] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|digital4z.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php?files[]=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digital4z.com"] [uri "/plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php"] [unique_id "alXRlvDYvbkXwfEz_bQx8gAAAhQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-07-13 16:08:17 (1 day ago)	mae-12 : Block return, carriage return, ... characters=>/media/vendor/jquery/js/jquery-noconflict.mi ... show more mae-12 : Block return, carriage return, ... characters=>/media/vendor/jquery/js/jquery-noconflict.min.js?3.7.1='(') show less	Hacking
🇩🇪 conseilgouz	2026-07-13 13:27:39 (1 day ago)	doe-12 : Block return, carriage return, ... characters=>/index.php/plan-du-site?view=html&amp=&# ... show more doe-12 : Block return, carriage return, ... characters=>/index.php/plan-du-site?view=html&amp='(') show less	Hacking
🇩🇪 Vegascosmetics	2026-07-13 07:24:51 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇦 URAN Publishing Service	2026-07-11 20:09:03 (2 days ago)	64.112.57.149 - - [11/Jul/2026:23:07:21 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTT ... show more 64.112.57.149 - - [11/Jul/2026:23:07:21 +0300] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 404 4667 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.57.149 - - [11/Jul/2026:23:09:02 +0300] "GET /wp-content/plugins/index.php HTTP/1.1" 404 4684 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 Rayulcifer	2026-07-11 19:27:08 (2 days ago)	64.112.57.149 - - [11/Jul/2026:14:27:05 -0500] "GET /.env.dev HTTP/2.0" 403 488 "-" "Mozilla/5.0 (Ma ... show more 64.112.57.149 - - [11/Jul/2026:14:27:05 -0500] "GET /.env.dev HTTP/2.0" 403 488 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇫🇷 conseilgouz	2026-07-11 18:58:45 (3 days ago)	loe-11 : Block illegal characters=>/forum/topics/feed/mode-topics?format=feedjavascript:alert(qsxss9 ... show more loe-11 : Block illegal characters=>/forum/topics/feed/mode-topics?format=feedjavascript:alert(qsxss9k7z)//&amp(alert(alert) show less	Hacking
Anonymous	2026-07-11 18:28:39 (3 days ago)	[11/Jul/2026:20:51:03 +0300] 178379226310.012146 64.112.57.149 55177 148.251.76.218 443 [11/Jul/2026 ... show more [11/Jul/2026:20:51:03 +0300] 178379226310.012146 64.112.57.149 55177 148.251.76.218 443 [11/Jul/2026:21:28:29 +0300] 178379450962.802012 64.112.57.149 59807 148.251.76.218 443 show less	Web App Attack
🇺🇸 ipblock.com	2026-07-11 17:14:00 (3 days ago)	IPBlock protected site ID [4055-d][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-11 11:25:00 (3 days ago)	64.112.57.149 - - [11/Jul/2026:19:24:57 +0800] "GET /.env.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 ( ... show more 64.112.57.149 - - [11/Jul/2026:19:24:57 +0800] "GET /.env.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-10 14:43:47 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 COMAITE	2026-07-10 12:19:16 (4 days ago)	SQL injection attempt from 64.112.57.149.	Web App Attack
🇺🇸 ipblock.com	2026-07-10 11:50:00 (4 days ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 92.118.39.71

🇫🇷 185.177.72.10

🇨🇦 158.69.227.40

🇮🇩 128.14.233.253

🇻🇳 103.167.88.166

🇹🇭 101.51.249.101

🇺🇸 52.176.211.73

🇳🇱 45.148.10.141

🇧🇪 198.235.24.208

🇺🇸 166.19.36.211

🇺🇸 162.216.150.45

🇻🇳 123.25.115.112

🇺🇸 66.132.195.29

🇺🇸 2600:1f14:1285:4503:2a12:37e:b80e:550f

🇯🇵 194.5.48.161

🇵🇱 176.53.159.198

🇹🇷 94.154.43.56

🇹🇼 61.220.241.183

🇳🇱 45.148.10.147

🇬🇧 35.203.210.36