JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.57.168

64.112.57.168 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 76%: ?

76%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.57.168

Whois 64.112.57.168

IP Abuse Reports for 64.112.57.168:

This IP address has been reported a total of 22 times from 13 distinct sources. 64.112.57.168 was first reported on July 8th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-07-11 21:23:17 (1 day ago)	64.112.57.168 - - [12/Jul/2026:00:23:17 +0300] "GET /.env HTTP/1.1" 404 3278 "-" "Mozilla/5.0 (Macin ... show more 64.112.57.168 - - [12/Jul/2026:00:23:17 +0300] "GET /.env HTTP/1.1" 404 3278 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-11 20:07:22 (1 day ago)	64.112.57.168 - - [11/Jul/2026:22:58:33 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 404 4670 ... show more 64.112.57.168 - - [11/Jul/2026:22:58:33 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 404 4670 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.57.168 - - [11/Jul/2026:23:07:21 +0300] "GET /wp-includes/Requests/about.php HTTP/1.1" 404 4667 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 conseilgouz	2026-07-11 18:58:48 (1 day ago)	loe-11 : Block illegal characters=>/?format=json%3Cscr%3Cscript%3Eipt%3Ealert(qsxss9k7z)%3C/scr%3C/s ... show more loe-11 : Block illegal characters=>/?format=json%3Cscr%3Cscript%3Eipt%3Ealert(qsxss9k7z)%3C/scr%3C/script%3Eipt%3E(alert(alert) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-11 10:18:38 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 06:18:18.287285 2026] [security2:error] [pid 7472:tid 7472] [client 64.112.57.168:55083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aupapierjaponais.com"] [uri "/.env.local"] [unique_id "alIYah7PzwO5hFF21GqPmgAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-10 18:56:00 (2 days ago)	IPBlock protected site ID [4055-d][s=06]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
Anonymous	2026-07-10 16:10:32 (2 days ago)	[10/Jul/2026:19:10:28 +0300] 178369982863.297682 64.112.57.168 33081 148.251.76.218 443 [10/Jul/2026 ... show more [10/Jul/2026:19:10:28 +0300] 178369982863.297682 64.112.57.168 33081 148.251.76.218 443 [10/Jul/2026:19:10:31 +0300] 178369983167.021463 64.112.57.168 33081 148.251.76.218 443 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 00:42:59 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 20:42:36.969662 2026] [security2:error] [pid 14834:tid 14843] [client 64.112.57.168:38767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seips.org"] [uri "/.env.production"] [unique_id "alA__DEI6SmaEyunY4c5XAAAAQU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-07-10 00:37:46 (3 days ago)	Scanning for web/db/file exploits on www.winkelspiegel.com	SQL Injection Bad Web Bot Web App Attack
Anonymous	2026-07-09 23:06:01 (3 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 20:14:39 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 16:14:15.444422 2026] [security2:error] [pid 3860:tid 3860] [client 64.112.57.168:44825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.athletefirst.org"] [uri "/.env"] [unique_id "alABF27Gu23Gs1k2k4T6qwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-07-09 19:18:23 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 backslash	2026-07-09 18:57:01 (3 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-09 18:12:29 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 14:12:09.539365 2026] [security2:error] [pid 1952839:tid 1952839] [client 64.112.57.168:33301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psdinnersready.com"] [uri "/.env.bak"] [unique_id "ak_keUOwl5erYA86J41KqQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 15:25:18 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 11:24:55.474752 2026] [security2:error] [pid 7291:tid 7291] [client 64.112.57.168:50051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.albertmassaad.com"] [uri "/.env.prod.local"] [unique_id "ak-9R5pZAEbnaJSulKiQWAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-09 05:55:00 (4 days ago)	IPBlock protected site ID [4055-d][s=02]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 217.24.185.98

🇬🇧 185.247.137.246

🇩🇪 139.59.154.49

🇧🇩 103.253.247.28

🇧🇩 103.221.66.236

🇧🇩 103.181.69.19

🇵🇰 103.150.207.122

🇩🇪 43.157.108.82

🇺🇸 2620:18c:0:192::e0:176

🇮🇩 202.72.196.75

🇪🇹 196.189.145.174

🇺🇸 172.178.81.49

🇩🇪 167.94.146.52

🇺🇸 155.103.69.40

🇩🇪 152.53.191.99

🇳🇱 91.92.42.227

🇳🇱 45.148.10.152

🇺🇦 37.221.157.40

🇺🇸 34.170.222.76

🇧🇷 20.195.178.189