JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.113.5.159

64.113.5.159 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 12%: ?

12%

ISP	GTHost
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	gthost.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.113.5.159

Whois 64.113.5.159

IP Abuse Reports for 64.113.5.159:

This IP address has been reported a total of 4 times from 4 distinct sources. 64.113.5.159 was first reported on June 30th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-10-13 04:48:00 (2 weeks ago)	block ruleset SQL-Injection: >iKO AFBC2EAECDB027719265B50DA3B95A6DF54F7E3D	SQL Injection
🇩🇪 raph	2026-10-13 03:55:48 (2 weeks ago)	[SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%2 ... show more [SQL INJECTION] f2b match %{+Q}r for ^.haproxy\[[0-9]+\]: <HOST>:. (GET \|POST ).\?.(%20AND%20\|%20and%20\|%20OR%20\|%20or%20).* HTTP/1.1$ show less	SQL Injection
🇺🇸 TPI-Abuse	2026-07-21 12:36:57 (3 months ago)	(mod_security) mod_security (id:243930) triggered by 64.113.5.159 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:243930) triggered by 64.113.5.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 08:36:53.898835 2026] [security2:error] [pid 7710:tid 7715] [client 64.113.5.159:41345] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}\|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)\|\|3dfilament.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "3dfilament.com"] [uri "/"] [unique_id "al9n5RWzx3tVmaDz3zSAqwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-06-30 21:35:57 (3 months ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇳 154.125.54.45

🇺🇸 96.19.180.207

🇩🇪 94.183.174.99

🇭🇰 82.109.60.14

🇺🇸 45.11.88.242

🇳🇴 20.251.194.156

🇨🇴 190.253.76.203

🇨🇱 186.107.127.82

🇨🇳 183.143.155.59

🇨🇭 179.43.153.2

🇰🇷 175.203.201.109

🇺🇸 165.154.163.10

🇺🇸 135.237.122.43

🇰🇷 119.192.128.163

🇩🇪 109.160.32.133

🇮🇳 103.19.133.170

🇰🇪 102.205.49.211

🇫🇷 85.217.140.8

🇺🇸 65.49.1.158

🇻🇳 58.186.20.101