JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.31.55.22

64.31.55.22 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Limestone Networks, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Hostname(s)	22-55-31-64.static.reverse.lstn.net
Domain Name	limestonenetworks.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.31.55.22

Whois 64.31.55.22

IP Abuse Reports for 64.31.55.22:

This IP address has been reported a total of 38 times from 19 distinct sources. 64.31.55.22 was first reported on July 3rd 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-05 22:06:05 (12 hours ago)	2.030 requests from abuseipdb.com blacklisted IP (1yr8mos3w)	Brute-Force Bad Web Bot
🇳🇱 Savvii	2026-07-05 16:34:39 (17 hours ago)	20 attempts against mh-misbehave-ban on ceres	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Dunham Support	2026-07-05 15:52:08 (18 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 64.31.55.22 (US/United States/22-55-31- ... show more (mod_security) mod_security triggered on hostname [redacted] 64.31.55.22 (US/United States/22-55-31-64.static.reverse.lstn.net) show less	SQL Injection
🇮🇩 Burayot	2026-07-05 11:25:40 (22 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 64.31.55.22 (US/United States/22-55- ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 64.31.55.22 (US/United States/22-55-31-64.static.reverse.lstn.net): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 omc	2026-07-05 05:35:37 (1 day ago)	AH01797: Unauthorized file	Bad Web Bot
🇬🇧 noise.agency	2026-07-05 05:05:57 (1 day ago)	64.31.55.22 (US/United States/22-55-31-64.static.reverse.lstn.net), more than 10 Apache 403 hits	Hacking
🇬🇧 WebNiraj	2026-07-05 04:33:47 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 64.31.55.22 (US/United States/22-55-31-64.stati ... show more (mod_security) mod_security (id:949110) triggered by 64.31.55.22 (US/United States/22-55-31-64.static.reverse.lstn.net): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇺🇸 Matthew Ping	2026-07-05 01:45:01 (1 day ago)	ModSecurity rule 949110 triggered on dedicated. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇩🇪 LRob	2026-07-05 00:30:44 (1 day ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇪🇸 alferez	2026-07-05 00:06:21 (1 day ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 19:27:43 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 64.31.55.22 (22-55-31-64.static.reverse.lstn.ne ... show more (mod_security) mod_security (id:210730) triggered by 64.31.55.22 (22-55-31-64.static.reverse.lstn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 15:27:36.022814 2026] [security2:error] [pid 26351:tid 26351] [client 64.31.55.22:53156] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|inverzona.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "inverzona.com"] [uri "/www.sql"] [unique_id "akleqMfo-53fOmdrv-L1xAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 18:00:20 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 64.31.55.22 (22-55-31-64.static.reverse.lstn.ne ... show more (mod_security) mod_security (id:210730) triggered by 64.31.55.22 (22-55-31-64.static.reverse.lstn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 14:00:16.266134 2026] [security2:error] [pid 5729:tid 5729] [client 64.31.55.22:59210] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|horseillustration.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "horseillustration.com"] [uri "/translate.sql"] [unique_id "aklKMItxrCmG02TRrS6ycAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-04 17:05:05 (1 day ago)	Abuse Detected (29)	Brute-Force Web App Attack
Anonymous	2026-07-04 16:24:37 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇺🇸 TPI-Abuse	2026-07-04 15:24:22 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 64.31.55.22 (22-55-31-64.static.reverse.lstn.ne ... show more (mod_security) mod_security (id:210730) triggered by 64.31.55.22 (22-55-31-64.static.reverse.lstn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 11:24:18.513651 2026] [security2:error] [pid 818:tid 818] [client 64.31.55.22:50237] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gisresults.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gisresults.com"] [uri "/1.sql"] [unique_id "akklojNyGQ6418CHPSw_PQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 185.183.103.121

🇰🇷 220.124.208.27

🇺🇸 173.255.223.49

🇭🇰 150.5.154.160

🇩🇪 141.95.90.77

🇧🇷 107.149.152.50

🇮🇩 103.112.5.35

🇺🇦 45.11.57.195

🇻🇳 14.169.111.83

🇮🇳 2405:201:6832:499b:794f:d112:8f99:65f2

🇩🇪 217.79.181.38

🇳🇱 89.21.67.139

🇺🇸 73.194.21.145

🇮🇳 52.172.177.191

🇭🇰 45.116.78.92

🇵🇱 194.180.49.218

🇧🇩 161.248.201.12

🇮🇳 152.59.180.48

🇺🇸 147.185.132.18

🇺🇸 147.182.135.71