JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.42.179.59

64.42.179.59 was found in our database!

This IP was reported 1,491 times. Confidence of Abuse is 21%: ?

21%

ISP	Dedicated.com
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63018
Domain Name	dedicated.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.42.179.59

Whois 64.42.179.59

IP Abuse Reports for 64.42.179.59:

This IP address has been reported a total of 1,491 times from 235 distinct sources. 64.42.179.59 was first reported on June 27th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-12 22:41:25 (1 week ago)	2026-06-12 22:41:25 warning[1623670]: host unknown[64.42.179.59]: unauthorized access atte ... show more 2026-06-12 22:41:25 warning[1623670]: host unknown[64.42.179.59]: unauthorized access attempted: tcp/9010 show less	Port Scan Brute-Force
🇨🇳 pengpeng	2026-05-31 04:01:09 (2 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 51812 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 51812 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-05-07 08:07:41 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 64.42.179.59 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 64.42.179.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 04:07:34.495357 2026] [security2:error] [pid 1916:tid 2013] [client 64.42.179.59:47468] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 64.42.179.59 (+1 hits since last alert)\|boxvalleyrockers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "boxvalleyrockers.com"] [uri "/xmlrpc.php"] [unique_id "afxIRm_Nm_qyYK8IahGfUAAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-05-07 08:00:53 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇩🇪 4server	2026-05-06 23:00:55 (1 month ago)	[ThuMay0701:00:51.6614882026][security2:error][pid3809878:tid3809890][client64.42.179.59:0]ModSecuri ... show more [ThuMay0701:00:51.6614882026][security2:error][pid3809878:tid3809890][client64.42.179.59:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"sisuconsulting.net\"][uri\"/xmlrpc.php\"][unique_id\"afvII1O_GyuicIrcg27xgAAAAAA\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-06 23:00:53 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 64.42.179.59 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 64.42.179.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 19:00:46.882856 2026] [security2:error] [pid 32420:tid 32420] [client 64.42.179.59:56382] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 64.42.179.59 (+1 hits since last alert)\|dandksupply.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dandksupply.com"] [uri "/xmlrpc.php"] [unique_id "afvIHpZOrZznMhkfLJx2pgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 SOC PR	2026-04-17 17:23:15 (2 months ago)	IPS: Malicious IP Addresses.	Hacking
🇺🇸 TPI-Abuse	2026-04-12 09:31:31 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 64.42.179.59 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 64.42.179.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 05:31:24.497264 2026] [security2:error] [pid 4133323:tid 4133323] [client 64.42.179.59:46436] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 64.42.179.59 (+1 hits since last alert)\|creationorevolution.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "creationorevolution.net"] [uri "/xmlrpc.php"] [unique_id "adtmbF_WHIVJoUTCEDuNCgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 R.G.	2026-04-12 09:28:12 (2 months ago)	(XMLRPCorWHATEVER) Get lost please 64.42.179.59 (US/United States/-): 3 in the last 900 secs; Ports: ... show more (XMLRPCorWHATEVER) Get lost please 64.42.179.59 (US/United States/-): 3 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇧🇪 cmbplf	2026-04-12 00:31:02 (2 months ago)	6.887 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-11 22:02:25 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 64.42.179.59 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 64.42.179.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 18:02:21.166016 2026] [security2:error] [pid 3056318:tid 3056318] [client 64.42.179.59:56824] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 64.42.179.59 (+1 hits since last alert)\|stationrestaurant.ca\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stationrestaurant.ca"] [uri "/xmlrpc.php"] [unique_id "adrE7cnjg5F_fvgSYZPpdQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-04-11 21:54:50 (2 months ago)		Web App Attack
🇨🇭 4server	2026-04-11 21:52:50 (2 months ago)	[SatApr1123:52:44.1477932026][security2:error][pid2375354:tid2375356][client64.42.179.59:0]ModSecuri ... show more [SatApr1123:52:44.1477932026][security2:error][pid2375354:tid2375356][client64.42.179.59:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"345\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"edilmarra.ch\"][uri\"/xmlrpc.php\"][unique_id\"adrCrH7dA0XkFZ0DyVplfAAAAAA\"] show less	Hacking Web App Attack
🇧🇪 madeit	2026-04-09 09:25:31 (2 months ago)		Web App Attack
🇨🇭 4server	2026-04-09 09:25:17 (2 months ago)	[ThuApr0911:25:10.8334692026][security2:error][pid2029160:tid2029244][client64.42.179.59:0]ModSecuri ... show more [ThuApr0911:25:10.8334692026][security2:error][pid2029160:tid2029244][client64.42.179.59:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"231\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"edilmarra.ch\"][uri\"/xmlrpc.php\"][unique_id\"addwdhkhojDwkgo-Wr5yFgAAAIE\"] show less	Hacking Web App Attack

Showing 1 to 15 of 1491 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.205

🇧🇷 205.210.31.171

🇲🇬 129.222.109.250

🇮🇳 122.170.111.140

🇺🇸 72.69.238.31

🇺🇸 64.62.197.186

🇹🇼 60.199.224.2

🇹🇼 45.43.37.254

🇬🇧 35.203.211.28

🇺🇸 18.116.101.220

🇯🇵 8.216.5.64

🇺🇸 216.25.89.123

🇺🇸 208.87.243.51

🇨🇳 202.105.196.30

🇨🇴 201.184.50.251

🇵🇭 180.191.169.65

🇷🇺 178.176.79.245

🇩🇪 167.94.146.34

🇭🇰 152.32.215.244

🇺🇸 147.185.132.202