JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.57.164

64.112.57.164 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 88%: ?

88%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.57.164

Whois 64.112.57.164

IP Abuse Reports for 64.112.57.164:

This IP address has been reported a total of 24 times from 16 distinct sources. 64.112.57.164 was first reported on July 8th 2026, and the most recent report was 39 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 tropicalidad.be	2026-07-13 22:41:08 (39 minutes ago)	blog spam/exploit attempt	Blog Spam Hacking
🇩🇪 Vegascosmetics	2026-07-13 09:51:41 (13 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇪🇸 Michael McCarthy	2026-07-13 08:57:28 (14 hours ago)		Web Spam
🇧🇷 Halux	2026-07-11 21:17:29 (2 days ago)	64.112.57.164 Probing protected path or service	Web App Attack
🇫🇷 conseilgouz	2026-07-11 18:58:44 (2 days ago)	loe-11 : Block illegal characters=>/?task=suggestions.suggest%22%3E%3Cimg%20src=x%20onerror=alert(qs ... show more loe-11 : Block illegal characters=>/?task=suggestions.suggest%22%3E%3Cimg%20src=x%20onerror=alert(qsxss9k7z)%3E&format=json&tmpl=component&Itemid=101(alert(alert) show less	Hacking
🇺🇸 Rayulcifer	2026-07-11 18:53:48 (2 days ago)	64.112.57.164 - - [11/Jul/2026:13:53:43 -0500] "GET /.env.development.local HTTP/2.0" 403 488 "-" "M ... show more 64.112.57.164 - - [11/Jul/2026:13:53:43 -0500] "GET /.env.development.local HTTP/2.0" 403 488 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇺🇸 ipblock.com	2026-07-11 18:18:00 (2 days ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇷🇺 OK	2026-07-11 11:44:17 (2 days ago)	HTTP/HTTPS	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-11 10:14:12 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.164 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 06:13:47.347925 2026] [security2:error] [pid 18624:tid 18624] [client 64.112.57.164:46731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fiyaplatform.com"] [uri "/.env.development.local"] [unique_id "alIXWyN56oeJTN6oCJbY3AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-10 16:10:31 (3 days ago)	[10/Jul/2026:19:10:28 +0300] 178369982895.623568 64.112.57.164 49655 148.251.76.218 443 [10/Jul/2026 ... show more [10/Jul/2026:19:10:28 +0300] 178369982895.623568 64.112.57.164 49655 148.251.76.218 443 [10/Jul/2026:19:10:30 +0300] 178369983070.144396 64.112.57.164 49655 148.251.76.218 443 show less	Web App Attack
🇺🇸 ipblock.com	2026-07-10 11:50:00 (3 days ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2026-07-10 11:41:21 (3 days ago)	hae-12 : Block return, carriage return, ... characters=>/media/plg_system_schedulerunner/js/run-sche ... show more hae-12 : Block return, carriage return, ... characters=>/media/plg_system_schedulerunner/js/run-schedule.min.js?229d3b='(') show less	Hacking
🇫🇷 Sklurk	2026-07-10 05:16:16 (3 days ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 22:18:05 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.164 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 18:17:49.562336 2026] [security2:error] [pid 14966:tid 14987] [client 64.112.57.164:43751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanacademyofprojectmanagement.com"] [uri "/.env.development.local"] [unique_id "alAeDT6nkbNljKNfrzGQZAAAANA"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-07-09 20:03:37 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.108

🇪🇸 185.11.238.96

🇷🇺 178.178.222.57

🇺🇸 135.237.126.228

🇺🇸 135.237.125.156

🇲🇽 104.243.245.156

🇷🇺 94.25.170.156

🇳🇱 89.248.167.131

🇸🇬 45.78.235.121

🇺🇸 38.141.62.212

🇩🇪 167.94.146.34

🇺🇸 166.70.79.233

🇺🇸 154.83.197.180

🇮🇩 103.147.159.91

🇷🇴 92.118.39.228

🇳🇱 91.92.40.176

🇵🇱 83.168.105.75

🇯🇵 43.165.185.177

🇹🇼 198.235.24.48

🇸🇪 185.217.1.243