JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.112.57.183

64.112.57.183 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 55%: ?

55%

ISP	Nexus Bytes LLC
Usage Type	Fixed Line ISP
ASN	AS6079
Domain Name	nexusbytes.com
Country	🇺🇸 United States of America
City	Leesburg, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.112.57.183

Whois 64.112.57.183

IP Abuse Reports for 64.112.57.183:

This IP address has been reported a total of 40 times from 21 distinct sources. 64.112.57.183 was first reported on July 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 integrantservices.com	2026-08-07 01:40:45 (1 week ago)	(wordpress) Failed wordpress login from 64.112.57.183 (US/United States/-)	Brute-Force
🇫🇷 conseilgouz	2026-08-04 03:42:37 (2 weeks ago)	mae-6 : Trying access system files=>/?task=suggestions.suggest'&format=json&tmpl=compon ... show more mae-6 : Trying access system files=>/?task=suggestions.suggest'&format=json&tmpl=component&Itemid=101(htaccessphp) show less	Hacking
Anonymous	2026-08-04 01:11:44 (2 weeks ago)	"GET /phpmyadmin/ HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-03 16:07:13 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.183 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 12:07:03.647545 2026] [security2:error] [pid 54570:tid 54570] [client 64.112.57.183:44993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/.env.prod.local"] [unique_id "anC8p1ud2oEHLS5wL6Ut1AAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-08-03 09:27:00 (2 weeks ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-08-01 14:45:08 (2 weeks ago)	ModSecurity rule 949110 triggered on d865. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇱🇺 conseilgouz	2026-07-30 06:46:22 (2 weeks ago)	are-12 : Block return, carriage return, ... characters=>/index.php?option=com_content&view=artic ... show more are-12 : Block return, carriage return, ... characters=>/index.php?option=com_content&view=article'&id=313:evenements-2016&catid=9:categorie-fr&lang=fr-FR&Itemid=540&iccaldate=2025-7-1(') show less	Hacking
🇫🇷 IRISIO	2026-07-28 10:38:31 (3 weeks ago)	scans/SQL injection/spam posts : 1 queries	Web App Attack SQL Injection
🇺🇸 ipblock.com	2026-07-26 03:40:00 (3 weeks ago)	IPBlock protected site ID [4730-fr]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-07-25 11:27:47 (3 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=POST path=/checkout/cart/add/uenc/aHR ... show more Requests denied due to active blacklist hits (tenant=82 method=POST path=/checkout/cart/add/uenc/aHR0cHM6Ly91bW5pdHphLmNvbS93aGVlbHMuaHRtbD9jYXQ9/product/10635/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 ipblock.com	2026-07-17 13:07:00 (1 month ago)	IPBlock protected site ID [4055-d][s=06]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-07-17 10:03:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 TheJimmo	2026-07-16 13:47:08 (1 month ago)	64.112.57.183 64.112.57.183 - - [16/Jul/2026:13:45:34 +0000] "GET /command.cgi?cat%20/etc/passwd HTT ... show more 64.112.57.183 64.112.57.183 - - [16/Jul/2026:13:45:34 +0000] "GET /command.cgi?cat%20/etc/passwd HTTP/1.1" 404 13378 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.57.183 64.112.57.183 - - [16/Jul/2026:13:45:36 +0000] "GET /include/downmix.inc.php HTTP/1.1" 404 13373 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.57.183 64.112.57.183 - - [16/Jul/2026:13:45:43 +0000] "POST /casa/nodes/thumbprints HTTP/1.1" 404 13377 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.57.183 64.112.57.183 - - [16/Jul/2026:13:45:45 +0000] "GET /agc/vicidial_mysqli_errors.txt HTTP/1.1" 404 13392 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 64.112.57.183 64.112.57.183 - - [16/Jul/2026:13 ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-16 11:22:08 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 64.112.57.183 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 64.112.57.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 07:21:49.518608 2026] [security2:error] [pid 14724:tid 14835] [client 64.112.57.183:37775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seips.org"] [uri "/.env.development.local"] [unique_id "ali-zXYfwEQWE4D2kvy21AAAAhM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-15 14:36:47 (1 month ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/admin-ajax.php	Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.52

🇦🇷 181.233.147.252

🇺🇸 162.241.91.148

🇱🇹 91.224.92.92

🇺🇸 64.62.156.127

🇨🇳 222.71.205.34

🇧🇷 191.253.2.59

🇬🇧 142.93.45.58

🇨🇳 125.124.183.254

🇨🇳 125.39.179.192

🇳🇱 46.129.5.66

🇺🇸 45.33.109.8

🇺🇸 45.18.255.202

🇸🇬 43.134.20.205

🇹🇿 41.59.31.247

🇺🇦 31.43.37.200

🇰🇷 14.42.49.70

🇷🇴 2.57.122.53

🇨🇳 221.229.220.180

🇺🇸 172.185.24.228