AbuseIPDB » 64.124.8.33

Check an IP Address, Domain Name, or Subnet

e.g. 44.200.168.16, microsoft.com, or 5.188.10.0/24

64.124.8.33 was found in our database!

This IP was reported 345 times. Confidence of Abuse is 100%: ?

100%

ISP	Castle Global
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	64.124.8.33.available.above.net
Domain Name	castleglobal.com
Country	United States of America
City	Dulles, Virginia

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 64.124.8.33

Whois 64.124.8.33

IP Abuse Reports for 64.124.8.33:

This IP address has been reported a total of 345 times from 69 distinct sources. 64.124.8.33 was first reported on June 7th 2022, and the most recent report was 20 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
hermawan	20 minutes ago	[Fri Mar 24 16:11:46.997616 2023] [security2:error] [pid 305176:tid 140122726786624] [client 64.124. ... show more[Fri Mar 24 16:11:46.997616 2023] [security2:error] [pid 305176:tid 140122726786624] [client 64.124.8.33:53518] [client 64.124.8.33] ModSecurity: Access denied with code 403 (phase 2). String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1390"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "ZB1pUvhVfKzvlEy4LdS3QwAAAB4"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[305258] [/DhWyFlrYI4] [ZB1pUvhVfKzvlEy4LdS3QwAAAB4] keep_ali ... show less	Hacking Web App Attack
Unwasted	22 Mar 2023	Abusive content scan (abuse_score:>80)	Hacking Brute-Force Web App Attack
ThreatBook.io	19 Mar 2023	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/64.124.8.33 2 ... show moreThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/64.124.8.33 2023-03-19 20:34:16 /robots.txt 2023-03-19 20:34:16 /cn/sc/elec_park/E_commerce/basic/Preferential/ show less	Web App Attack
baku.hosting	19 Mar 2023	(mod_security) mod_security (id:949110) triggered by 64.124.8.33 (US/United States/64.124.8.33.avail ... show more(mod_security) mod_security (id:949110) triggered by 64.124.8.33 (US/United States/64.124.8.33.available.above.net): 8 in the last 3600 secs show less	Brute-Force
sceptique	19 Mar 2023	Hacking bot	Web App Attack
Unwasted	18 Mar 2023	Abusive content scan (abuse_score:>80)	Hacking Brute-Force Web App Attack
MAGIC	18 Mar 2023	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot
Anonymous	18 Mar 2023	64.124.8.33 - - [10/Mar/2023:04:13:10 +0100] "GET /wordpress/sample-libraries/aphelion-sfx-library/a ... show more64.124.8.33 - - [10/Mar/2023:04:13:10 +0100] "GET /wordpress/sample-libraries/aphelion-sfx-library/aphelion-v2-plugged-out-suspense-pack/ HTTP/1.1" 404 96001 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36" 64.124.8.33 - - [17/Mar/2023:22:14:21 +0100] "GET /wordpress/sample-libraries/aphelion-sfx-library/ HTTP/1.1" 404 96968 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36" 64.124.8.33 - - [17/Mar/2023:23:44:26 +0100] "GET /wordpress/sample-libraries/modularium/ HTTP/1.1" 404 96991 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36" 64.124.8.33 - - [18/Mar/2023:02:36:55 +0100] "GET /wordpress/sample-librarys/abstract-grooves-2/ HTTP/1.1" 404 101531 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36" ... show less	Hacking Bad Web Bot
Clapper	17 Mar 2023	(mod_security) mod_security (id:949110) triggered by 64.124.8.33 (US/United States/64.124.8.33.avail ... show more(mod_security) mod_security (id:949110) triggered by 64.124.8.33 (US/United States/64.124.8.33.available.above.net): 5 in the last 14400 secs; ID: DAN show less	Brute-Force Bad Web Bot
MHuiG	17 Mar 2023	The IP has triggered Cloudflare WAF. action: skip source: firewallCustom clientAsn: 36321 clientASND ... show moreThe IP has triggered Cloudflare WAF. action: skip source: firewallCustom clientAsn: 36321 clientASNDescription: CSTL clientCountryName: US clientIP: 64.124.8.33 clientRequestHTTPHost: mhuig.top clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /atom.xml clientRequestQuery: datetime: 2023-03-17T14:03:15Z rayName: 7a95c73ea8a22acd ruleId: 936ce3b610d2450d9b3de5a4733a7fe9 userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
oh.mg	17 Mar 2023	(mod_security) mod_security (id:949110) triggered by 64.124.8.33 (US/United States/64.124.8.33.avail ... show more(mod_security) mod_security (id:949110) triggered by 64.124.8.33 (US/United States/64.124.8.33.available.above.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Mar 17 13:05:43.854632 2023] [:error] [pid 941717:tid 139850334316288] [client 64.124.8.33:14410] [client 64.124.8.33] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "184"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.0.0-rc1"] [tag "anomaly-evaluation"] [hostname "oh.mg"] [uri "/robots.txt"] [unique_id "ZBRlpwYy-8wWa10hBGpoZgAAAJU"] show less	Port Scan
etu brutus	17 Mar 2023	64.124.8.33 has been banned for [cms abuse] ...	Hacking Brute-Force
MAGIC	17 Mar 2023	Distributed DDOS attempts for multiple sites	DDoS Attack Bad Web Bot
Unwasted	17 Mar 2023	Blocked IP still knocking	Hacking
hermawan	17 Mar 2023	[Fri Mar 17 11:35:47.304609 2023] [security2:error] [pid 56334:tid 140117584524864] [client 64.124.8 ... show more[Fri Mar 17 11:35:47.304609 2023] [security2:error] [pid 56334:tid 140117584524864] [client 64.124.8.33:60390] [client 64.124.8.33] ModSecurity: Access denied with code 403 (phase 2). String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1390"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "ZBPuI4Khd9V2oMk5dsH6pgAAASk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[56427] [OwlqHKn+9F0] [ZBPuI4Khd9V2oMk5dsH6pgAAASk] keep_alive ... show less	Hacking Web App Attack