JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.57.150

64.112.57.150 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 56%: ?

56%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.57.150

Whois 64.112.57.150

IP Abuse Reports for 64.112.57.150:

This IP address has been reported a total of 48 times from 28 distinct sources. 64.112.57.150 was first reported on July 8th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 TCATERDSBE	2026-08-17 13:38:00 (5 days ago)	SQL Injection	SQL Injection
🇺🇸 integrantservices.com	2026-08-07 01:40:41 (2 weeks ago)	(wordpress) Failed wordpress login from 64.112.57.150 (US/United States/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-04 06:27:22 (2 weeks ago)	(mod_security) mod_security (id:212620) triggered by 64.112.57.150 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:212620) triggered by 64.112.57.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 02:25:50.069954 2026] [security2:error] [pid 1357688:tid 1357688] [client 64.112.57.150:40817] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.powerkiteforum.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /misc.php?action=list&order=<scr<script>ipt>alert(qsxss9k7z)</scr</script>ipt>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.powerkiteforum.com"] [uri "/misc.php"] [unique_id "anGF7qnV3OGeaIZPnj6GHQAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 tropicalidad.be	2026-08-03 17:24:19 (2 weeks ago)	blog spam/exploit attempt	Blog Spam Hacking
🇮🇩 bps-statistics	2026-08-03 16:40:39 (2 weeks ago)	Web Application Attacks	Web App Attack
🇺🇸 TPI-Abuse	2026-08-03 15:56:05 (2 weeks ago)	(mod_security) mod_security (id:212620) triggered by 64.112.57.150 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:212620) triggered by 64.112.57.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 11:55:47.427234 2026] [security2:error] [pid 40562:tid 40562] [client 64.112.57.150:56633] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.laboquimia.es\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /catalogo/producto.php?ref=1.70344.0100/1.70344.0100&na=renio-patron-icp-trazable-a-srm-de-nistnh42reo4-en-h2o-1000-mgl-re-certipur1-x-100-ml-merck&codigo=20441703440100<scr<script>ipt>alert(qsxss9k7z)</scr</script>ipt>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.laboquimia.es"] [uri "/catalogo/producto.php"] [unique_id "anC6A7RznsAbcmBJi5xnUAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-03 15:32:26 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.150 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 11:32:11.523736 2026] [security2:error] [pid 3841943:tid 3841943] [client 64.112.57.150:50209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "watermarks.info"] [uri "/.env.prod.local"] [unique_id "anC0ew2Eo2RlwxZUXPphnAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-31 16:45:00 (3 weeks ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇱🇺 conseilgouz	2026-07-28 09:59:48 (3 weeks ago)	are-12 : Block return, carriage return, ... characters=>/media/com_finder/js/finder.min.js?755761=&# ... show more are-12 : Block return, carriage return, ... characters=>/media/com_finder/js/finder.min.js?755761='(') show less	Hacking
🇩🇪 iGroupware	2026-07-25 23:50:09 (4 weeks ago)	[Invisible Captcha] Potential spam detected for IP 64.112.57.150. Timestamp not found in session.	Web App Attack
🇫🇷 France Artisanat	2026-07-24 06:55:17 (4 weeks ago)	test	Web Spam
🇸🇪 SkyDancer	2026-07-20 10:03:12 (1 month ago)	Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ... show more Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx show less	Hacking Brute-Force SSH
🇮🇩 bps-statistics	2026-07-19 20:02:33 (1 month ago)	Web Application Attacks	Web App Attack
🇺🇸 ipblock.com	2026-07-18 22:51:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-17 13:07:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.100.36.0

🇲🇽 200.77.172.159

🇦🇷 186.131.222.193

🇳🇱 45.148.10.157

🇺🇦 45.85.36.252

🇺🇸 20.65.193.105

🇺🇸 18.221.179.104

🇺🇸 2400:cb00:960:1000:40b2:6fe8:dbed:85e0

🇺🇸 192.236.225.165

🇺🇸 172.105.128.12

🇺🇸 162.216.149.55

🇺🇸 147.185.132.115

🇸🇬 114.119.166.166

🇵🇰 59.103.104.119

🇺🇸 192.210.150.215

🇳🇱 176.65.148.136

🇨🇳 115.85.243.85

🇫🇮 88.85.131.150

🇨🇦 85.217.149.70

🇬🇧 2.57.17.95