JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

64.64.123.54

Neutral Activity

Abuse confidence score ?

0% Low Risk

163 reports

36 reporters · latest 1 year ago

ISP	LogicWeb Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	logicweb.com
Country	🇺🇸 United States of America
City	Los Angeles, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

64.64.123.54 has been reported 163 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 64.64.123.54

This IP address has been reported a total of 163 times from 36 distinct sources. 64.64.123.54 was first reported on November 26th 2022, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-12-16 09:10:09 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2024-12-13 09:05:11 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇦🇺 MAGIC	2024-12-08 03:04:15 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-12-08 03:01:48 (1 year ago)	(mod_security) mod_security (id:217280) triggered by 64.64.123.54 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:217280) triggered by 64.64.123.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 22:01:44.463184 2024] [security2:error] [pid 27512:tid 27512] [client 64.64.123.54:39443] [client 64.64.123.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n\|\\\\r)+(?:get\|post\|head\|options\|connect\|put\|delete\|trace\|propfind\|propatch\|mkcol\|copy\|move\|lock\|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack\|\|www.kreweofblackbeardsrevenge.com\|F\|2"] [data "Matched Data: get found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kreweofblackbeardsrevenge.com"] [uri "/contact_us.html"] [unique_id "Z1UMGOAK6NiMmiiYWTlZWQAAAAA"], referer: https://www.kreweofblackbeardsrevenge.com/contact_us.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 oncord	2024-12-08 02:43:43 (1 year ago)	Form spam	Web Spam
Anonymous	2024-11-28 22:50:09 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇩🇪 netclix.gr	2024-11-27 21:04:43 (1 year ago)	(CT) IP 64.64.123.54 (GB/United Kingdom/England/London/-) found to have 14 connections; Ports: ; Di ... show more (CT) IP 64.64.123.54 (GB/United Kingdom/England/London/-) found to have 14 connections; Ports: ; Direction: inout; Trigger: CT_LIMIT; Logs: tcp: 64.64.123.54:6205 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:34213 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:36321 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:57849 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:15455 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:33431 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:1793 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:55009 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:5073 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:56367 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:23057 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:1685 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:46315 -> 148.251.44.120:443 (TIME_WAIT) tcp: 64.64.123.54:2085 -> 148.251.44.120:443 (TIME_WAIT) show less	Port Scan
Anonymous	2024-11-25 22:50:08 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇦🇪 abusiveIntelligence	2024-11-23 02:00:00 (1 year ago)	RDP Local Account Slowly Brute-force Attempt	Brute-Force
🇦🇪 abusiveIntelligence	2024-11-22 15:00:00 (1 year ago)	RDP Local Account Slowly Brute-force Attempt	Brute-Force
🇦🇹 CTK	2024-11-22 14:47:23 (1 year ago)	Customer Site (Grieskirchen FP)	Brute-Force
🇺🇸 TPI-Abuse	2024-11-21 21:34:26 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 64.64.123.54 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 64.64.123.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 21 16:34:21.850229 2024] [security2:error] [pid 1548:tid 1548] [client 64.64.123.54:8939] [client 64.64.123.54] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ciptaconindotara.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ciptaconindotara.com"] [uri "/restore/www.sql"] [unique_id "Zz-nXVsaB-npUyNpjrFrwgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 guillaume illien	2024-11-11 13:45:03 (1 year ago)	64.64.123.54 - - [11/Nov/2024:13:45:00 +0000] "HEAD /backups/index.zip HTTP/1.1" 301 0 "-" "-" 64.64 ... show more 64.64.123.54 - - [11/Nov/2024:13:45:00 +0000] "HEAD /backups/index.zip HTTP/1.1" 301 0 "-" "-" 64.64.123.54 - - [11/Nov/2024:13:45:01 +0000] "HEAD /backups/sql.sql HTTP/1.1" 301 0 "-" "-" 64.64.123.54 - - [11/Nov/2024:13:45:01 +0000] "HEAD /restore/public_html.zip HTTP/1.1" 301 0 "-" "-" 64.64.123.54 - - [11/Nov/2024:13:45:02 +0000] "HEAD /back/www.sql HTTP/1.1" 301 0 "-" "-" 64.64.123.54 - - [11/Nov/2024:13:45:02 +0000] "HEAD /backup/public_html.zip HTTP/1.1" 301 0 "-" "-" 64.64.123.54 - - [11/Nov/2024:13:45:02 +0000] "HEAD /restore/bak.tar.gz HTTP/1.1" 301 0 "-" "-" 64.64.123.54 - - [11/Nov/2024:13:45:03 +0000] "HEAD /bak/application.zip HTTP/1.1" 301 0 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇺🇸 TPI-Abuse	2024-11-08 22:46:02 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 64.64.123.54 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 64.64.123.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 17:45:57.347109 2024] [security2:error] [pid 17052:tid 17052] [client 64.64.123.54:34383] [client 64.64.123.54] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|barnesandbrower.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "barnesandbrower.com"] [uri "/backup/wallet.dat"] [unique_id "Zy6UpbEJ4lXfhr4MVBlidgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-08 13:05:09 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 203.167.15.64

🇺🇸 146.88.240.180

🇳🇱 77.239.124.121

🇵🇰 202.47.46.82

🇻🇪 200.93.120.31

🇩🇪 196.251.121.128

🇩🇪 196.251.121.126

🇦🇺 170.64.160.198

🇺🇸 167.71.30.243

🇳🇬 152.32.143.6

🇺🇸 144.172.85.75

🇯🇵 136.110.69.209

🇫🇷 85.217.140.42

🇧🇬 82.147.142.205

🇦🇪 74.162.106.25

🇺🇸 66.240.236.109

🇺🇸 65.49.1.189

🇨🇳 58.221.60.25

🇺🇸 38.156.201.109

🇭🇰 35.220.181.142