JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.31.55.44

64.31.55.44 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 100%: ?

100%

ISP	Limestone Networks, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Hostname(s)	44-55-31-64.static.reverse.lstn.net
Domain Name	limestonenetworks.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.31.55.44

Whois 64.31.55.44

IP Abuse Reports for 64.31.55.44:

This IP address has been reported a total of 58 times from 47 distinct sources. 64.31.55.44 was first reported on March 29th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2026-07-26 05:39:00 (2 hours ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Jul 25. 17:14:21 Source IP: 64.31. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Jul 25. 17:14:21 Source IP: 64.31.55.44 Portion of the log(s): 64.31.55.44 - [25/Jul/2026:17:14:21 +0200] "GET /site.sql HTTP/1.1" 404 153 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.7.20) Gecko/ Firefox/3.6.20" 64.31.55.44 - [25/Jul/2026:17:14:21 +0200] "GET /sql.sql HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" 64.31.55.44 - [25/Jul/2026:17:14:21 +0200] "GET /dbdump.sql HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.2 Safari/605.1.15" 64.31.55.44 - [25/Jul/2026:17:14:21 +0200] "GET /backup.sql HTTP/1.1" 404 153 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0" 64.31.55.44 - [25/Jul/2026:17:14:21 +0200] "GET /temp.sql HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; ja-jp) AppleWebKit/523.12.2 (KHTML, like Gecko) Version/3.0.4 Safari/523.12.2" .... show less	Web App Attack Hacking
🇪🇸 alferez	2026-07-26 00:19:24 (7 hours ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇩🇪 MarkGGN	2026-07-25 23:31:49 (8 hours ago)	Web attack. 64.31.55.44 - - [26/Jul/2026:01:31:48 +0200] "GET /mysqldump.sql HTTP/1.1" 301 5 "-" "Mo ... show more Web attack. 64.31.55.44 - - [26/Jul/2026:01:31:48 +0200] "GET /mysqldump.sql HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" 64.31.55.44 - - [26/Jul/2026:01:31:48 +0200] "GET /mysql.sql HTTP/1.1" 301 5 "-" "Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.17" show less	Web App Attack
🇳🇱 Savvii	2026-07-25 22:41:35 (9 hours ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-25 20:35:13 (11 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇩🇪 sdos.es	2026-07-25 19:26:52 (12 hours ago)	"URL file extension is restricted by policy - .sql"	Web App Attack
🇩🇪 on-com	2026-07-25 19:13:22 (12 hours ago)	URL scan	Brute-Force Web App Attack
Anonymous	2026-07-25 17:24:43 (14 hours ago)	$f2bV_matches	Brute-Force
🇨🇦 Dunham Support	2026-07-25 16:54:56 (15 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 64.31.55.44 (US/United States/44-55-31- ... show more (mod_security) mod_security triggered on hostname [redacted] 64.31.55.44 (US/United States/44-55-31-64.static.reverse.lstn.net) show less	SQL Injection
🇨🇭 backslash	2026-07-25 15:03:04 (17 hours ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇨🇿 antihack.anarchista.xyz	2026-07-25 14:51:14 (17 hours ago)	404 burst: 20 hits in 5 min, URI /site.sql, Ref , UA Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537. ... show more 404 burst: 20 hits in 5 min, URI /site.sql, Ref , UA Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-25 12:40:07 (19 hours ago)	(mod_security) mod_security (id:210730) triggered by 64.31.55.44 (44-55-31-64.static.reverse.lstn.ne ... show more (mod_security) mod_security (id:210730) triggered by 64.31.55.44 (44-55-31-64.static.reverse.lstn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 08:40:00.530805 2026] [security2:error] [pid 1578106:tid 1578106] [client 64.31.55.44:53573] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|televisonic.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "televisonic.com"] [uri "/1.sql"] [unique_id "amSuoEfTiJhJim0cDzYoYAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-07-25 11:55:21 (20 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /tapissier-geneve.ch_db.sql \| 5 distinct paths \| ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /tapissier-geneve.ch_db.sql \| 5 distinct paths \| UA: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 show less	Hacking
🇺🇸 TPI-Abuse	2026-07-25 11:33:12 (20 hours ago)	(mod_security) mod_security (id:210730) triggered by 64.31.55.44 (44-55-31-64.static.reverse.lstn.ne ... show more (mod_security) mod_security (id:210730) triggered by 64.31.55.44 (44-55-31-64.static.reverse.lstn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 07:33:08.330161 2026] [security2:error] [pid 1119116:tid 1119116] [client 64.31.55.44:58013] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|taekwondoit.com\|F\|2"] [data ".com_db.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "taekwondoit.com"] [uri "/taekwondoit.com_db.sql"] [unique_id "amSe9GtiEDzKcsWAaRpTKQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-07-25 09:45:02 (22 hours ago)	ModSecurity rule 949110 triggered on cumberland. Web application attack blocked by CSF/LFD.	Web App Attack Hacking

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.168.60.146

🇨🇳 114.220.176.69

🇮🇳 103.48.70.116

🇺🇸 65.49.1.16

🇺🇸 18.221.179.104

🇧🇬 193.24.211.76

🇺🇸 176.223.168.71

🇺🇸 157.230.210.106

🇦🇺 123.243.91.106

🇨🇳 121.46.239.199

🇨🇳 60.176.239.102

🇮🇪 3.255.177.208

🇺🇸 198.57.219.18

🇺🇦 194.156.249.154

🇦🇷 170.155.12.20

🇺🇸 152.39.165.39

🇺🇸 150.107.36.236

🇫🇮 147.185.133.125

🇺🇸 147.182.198.28

🇮🇳 121.91.187.205