JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.64.123.41

64.64.123.41 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 0%: ?

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	logicweb.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.64.123.41

Whois 64.64.123.41

IP Abuse Reports for 64.64.123.41:

This IP address has been reported a total of 125 times from 37 distinct sources. 64.64.123.41 was first reported on November 23rd 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-12-13 11:04:32 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-12-01 07:09:52 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 02:09:43.041199 2024] [security2:error] [pid 748628:tid 748628] [client 64.64.123.41:7859] [client 64.64.123.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aeongames.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aeongames.com"] [uri "/backup.sql"] [unique_id "Z0wLtwhAaeZx59QJ9R8jVwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-28 12:11:25 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 28 07:11:19.501928 2024] [security2:error] [pid 20489:tid 20601] [client 64.64.123.41:1789] [client 64.64.123.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.fishrapper.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fishrapper.com"] [uri "/back/www.sql"] [unique_id "Z0hd5wwFBeCBlNX0CHYqJAAAANA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-27 15:35:08 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 TPI-Abuse	2024-11-22 06:13:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 22 01:13:42.057042 2024] [security2:error] [pid 17174:tid 17174] [client 64.64.123.41:34805] [client 64.64.123.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.enriquelaw.com"] [uri "/restore/sftp-config.json"] [unique_id "Z0AhFn_UAYQRtAkHO0efVgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-11-21 17:02:40 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-11-20 11:44:01 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 20 06:43:54.593636 2024] [security2:error] [pid 702927:tid 702927] [client 64.64.123.41:17475] [client 64.64.123.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|lundtrading.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lundtrading.com"] [uri "/back/wallet.dat"] [unique_id "Zz3LeqOqrGrvsbEDMolLEgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-20 00:31:02 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 TPI-Abuse	2024-11-19 12:52:17 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 07:52:12.962178 2024] [security2:error] [pid 421:tid 421] [client 64.64.123.41:49717] [client 64.64.123.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "symbarenewables.com"] [uri "/sftp-config.json"] [unique_id "ZzyJ_Ok-4YCZTQCEquW9MwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2024-11-19 12:51:57 (1 year ago)	64.64.123.41 - - [19/Nov/2024:15:51:53 +0300] "GET /backups/public_html.gz HTTP/1.0" 404 28954 "-" " ... show more 64.64.123.41 - - [19/Nov/2024:15:51:53 +0300] "GET /backups/public_html.gz HTTP/1.0" 404 28954 "-" "-" 64.64.123.41 - - [19/Nov/2024:15:51:53 +0300] "GET /back/wallet.zip HTTP/1.0" 404 28888 "-" "-" 64.64.123.41 - - [19/Nov/2024:15:51:54 +0300] "GET /back/backup.tar HTTP/1.0" 404 28888 "-" "-" 64.64.123.41 - - [19/Nov/2024:15:51:55 +0300] "GET /back/bak.gz HTTP/1.0" 404 28852 "-" "-" 64.64.123.41 - - [19/Nov/2024:15:51:55 +0300] "GET /directory.tar HTTP/1.0" 404 28878 "-" "-" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇬🇧 Philostratus	2024-11-14 09:18:00 (1 year ago)	Form Spam	Blog Spam Port Scan Exploited Host
🇦🇺 MAGIC	2024-11-13 01:05:28 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-11-03 20:05:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 03 15:05:06.665155 2024] [security2:error] [pid 7357:tid 7357] [client 64.64.123.41:2261] [client 64.64.123.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.naturephotographyadventures.com"] [uri "/biodiane.htm/backup/sftp-config.json"] [unique_id "ZyfXcgv6uVXBpfe3V1CjjgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-03 12:45:25 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 03 07:45:18.039639 2024] [security2:error] [pid 8392:tid 8392] [client 64.64.123.41:4363] [client 64.64.123.41] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mapleleaf-marketing.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mapleleaf-marketing.com"] [uri "/restore/www.sql"] [unique_id "ZydwXmWhBThxkBHKqi53ewAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-11-02 16:27:56 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.64.123.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 12:27:50.367155 2024] [security2:error] [pid 32348:tid 32348] [client 64.64.123.41:8413] [client 64.64.123.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barnesandbrower.com"] [uri "/backup/sftp-config.json"] [unique_id "ZyZTBtU1oW6IWTl45-1F5AAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:1036:1000:7035:96f6:6be2:b8e5

🇳🇱 188.166.48.230

🇳🇱 188.166.48.179

🇫🇮 147.185.133.250

🇳🇱 45.148.10.152

🇧🇷 205.210.31.230

🇰🇪 197.248.15.98

🇳🇱 188.166.4.231

🇳🇱 188.166.4.188

🇳🇱 188.166.4.155

🇺🇸 184.105.139.117

🇷🇺 176.99.130.169

🇩🇪 167.94.146.60

🇺🇸 165.22.146.146

🇸🇪 158.174.211.17

🇫🇮 147.185.133.150

🇺🇸 144.202.92.17

🇵🇹 85.243.203.209

🇸🇬 34.87.67.190

🇳🇱 188.166.39.241