JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.137.59.200

64.137.59.200 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 1%: ?

ISP	FASTPLANET LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	fastplanet.com
Country	🇮🇹 Italy
City	Figino, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.137.59.200

Whois 64.137.59.200

IP Abuse Reports for 64.137.59.200:

This IP address has been reported a total of 16 times from 4 distinct sources. 64.137.59.200 was first reported on September 12th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-11 11:54:09 (1 week ago)	Tentative détectée sur notre infrastructure	Web App Attack Hacking
🇺🇸 TPI-Abuse	2025-12-29 19:04:15 (5 months ago)	(mod_security) mod_security (id:212620) triggered by 64.137.59.200 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:212620) triggered by 64.137.59.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 14:04:08.611783 2025] [security2:error] [pid 22842:tid 23013] [client 64.137.59.200:36573] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.kettlehill.net\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /examples/jsp/snp/snoop.jsp;<script>alert(document.domain)</script>test.jsp"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.kettlehill.net"] [uri "/examples/jsp/snp/snoop.jsp;<script>alert(document.domain)</script>test.jsp"] [unique_id "aVLQqFKoonkfA7MmLZcKAgAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 04:33:38 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 64.137.59.200 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 64.137.59.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 23:33:32.732552 2025] [security2:error] [pid 32582:tid 32582] [client 64.137.59.200:46739] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mail.nbcnewsradio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.nbcnewsradio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aRQOHKq9dMuozSsuw2mp3AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 01:39:21 (10 months ago)	(mod_security) mod_security (id:211190) triggered by 64.137.59.200 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211190) triggered by 64.137.59.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 21:39:17.531828 2025] [security2:error] [pid 729657:tid 729712] [client 64.137.59.200:37577] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|staging.kettlehill.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /pictureproxy.php?url=file:///etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.kettlehill.com"] [uri "/pictureproxy.php"] [unique_id "aIWDRRUVDjlJfvQpjEJS3gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-06 19:50:02 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack
Anonymous	2024-11-24 04:43:00 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-17 04:26:31 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-10 03:45:56 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-11-02 18:56:33 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-26 17:23:42 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-19 11:01:12 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-12 04:14:10 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-10-05 02:14:10 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-09-28 01:38:47 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot
Anonymous	2024-09-20 00:17:54 (1 year ago)	alibaba cloud ddos like web scan	Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 209.99.185.81

🇭🇰 199.45.154.126

🇳🇱 176.65.139.216

🇸🇬 101.47.8.187

🇺🇸 100.29.192.38

🇳🇱 91.92.42.227

🇬🇹 45.228.235.108

🇳🇱 45.148.10.152

🇨🇳 42.4.243.81

🇧🇷 201.55.176.190

🇲🇰 185.193.240.246

🇺🇸 162.216.150.32

🇩🇪 64.89.163.141

🇨🇭 35.216.144.195

🇺🇸 34.69.200.140

🇺🇸 2604:a880:400:d1:0:4:9e83:f001

🇫🇷 212.47.65.20

🇨🇳 182.127.194.98

🇭🇰 118.26.36.248

🇨🇳 116.179.32.171