JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.64.108.67

64.64.108.67 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 18%: ?

18%

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	logicweb.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.64.108.67

Whois 64.64.108.67

IP Abuse Reports for 64.64.108.67:

This IP address has been reported a total of 123 times from 45 distinct sources. 64.64.108.67 was first reported on December 11th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-08-11 01:27:23 (2 weeks ago)	64.64.108.67 - - [11/Aug/2026:03:27:22 +0200] "GET /.env.production HTTP/1.1" 403 5288 "-" "Mozilla/ ... show more 64.64.108.67 - - [11/Aug/2026:03:27:22 +0200] "GET /.env.production HTTP/1.1" 403 5288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Lino Project	2026-08-10 22:56:27 (2 weeks ago)	64.64.108.67 - - [11/Aug/2026:00:56:25 +0200] "POST /.env HTTP/1.1" 403 5288 "-" "Mozilla/5.0 (Windo ... show more 64.64.108.67 - - [11/Aug/2026:00:56:25 +0200] "POST /.env HTTP/1.1" 403 5288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-07-23 14:13:43 (1 month ago)	[ThuJul2316:13:39.5549052026][security2:error][pid1882228:tid1882381][client64.64.108.67:0]ModSecuri ... show more [ThuJul2316:13:39.5549052026][security2:error][pid1882228:tid1882381][client64.64.108.67:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"modules/mod_simplefileuploadv1\\\\\\\\.3\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf\"][line\"640\"][id\"390746\"][rev\"1\"][msg\"Atomicorp.comWAFRules-VirtualJustInTimePatch:KnownVulnerableJoomlaSimpleFileUploadv1.3Accessblocked\"][hostname\"craniosacraltherapy.ch\"][uri\"/modules/mod_simplefileuploadv1.3/elements/filemanager.php\"][unique_id\"amIhkygT8Dj_LkHM6i-qWAAAAUk\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 Origon	2026-07-21 11:13:41 (1 month ago)	http-wordpress-scan - IP: 64.64.108.67 - time="2026-07-21T13:13:41+02:00" level=info msg="(555f66b4 ... show more http-wordpress-scan - IP: 64.64.108.67 - time="2026-07-21T13:13:41+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 64.64.108.67 (IT/206092) : 4h ban on Ip 64.64.108.67" module=db show less	Web App Attack
🇱🇻 garmtech.com	2026-07-21 07:10:26 (1 month ago)	IM360 WAF: Block access to the shell MV:/gel4y.php	Hacking
🇺🇸 nyt	2026-06-23 19:54:21 (2 months ago)	WP login POST blocked by WAF, Bare UA + POST	Brute-Force Web App Attack
Anonymous	2026-06-01 22:20:10 (2 months ago)	Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (1 hit). Reported by CRMON.	Web App Attack
Anonymous	2026-03-27 09:03:25 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
Anonymous	2026-03-26 08:04:39 (5 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning show less	Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-03-25 22:46:39 (5 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC JP/Japan/-	Web App Attack
🇺🇸 myagent.site	2026-03-25 22:22:41 (5 months ago)	Blocking for trying to access an exploit file: //xmlrpc.php?rsd	Hacking
🇳🇱 homeshowdomain.nl	2026-03-18 22:59:37 (5 months ago)	Auto-ban: >3000 req/min op 2026-03-18	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-03-18 05:45:07 (5 months ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-02-26 00:27:12 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 64.64.108.67 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 64.64.108.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 19:26:46.914044 2026] [security2:error] [pid 21798:tid 21798] [client 64.64.108.67:46395] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.lasertherapyoc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lasertherapyoc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZ-TRg9NAHelR3jaKw8k6wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-25 19:04:47 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 64.64.108.67 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 64.64.108.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 14:04:38.589617 2026] [security2:error] [pid 15277:tid 15277] [client 64.64.108.67:32279] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lahamradio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lahamradio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZ9HxlwEWoiR2k7f_k-S_gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.181

🇩🇪 165.232.70.78

🇺🇸 162.216.150.54

🇷🇴 154.56.0.228

🇫🇮 147.185.133.154

🇧🇩 103.166.58.132

🇫🇷 85.217.140.34

🇩🇪 69.5.169.159

🇩🇪 45.43.62.37

🇮🇶 37.77.49.210

🇫🇮 37.27.9.174

🇬🇧 35.203.211.128

🇺🇸 205.210.31.48

🇳🇱 195.178.110.26

🇧🇷 179.189.86.151

🇺🇸 172.86.114.38

🇺🇸 147.185.132.38

🇧🇩 103.87.250.195

🇮🇳 80.225.241.76

🇩🇪 69.5.169.143