64.112.57.159

Classification: Malicious

64.112.57.159 is a malicious IP address. Reported by 2 threat sources, last seen 2026-09-05. Network: AS6079 Nexus Bytes LLC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
DDoS Attacker Blocklist.net.ua 2026-07-13 16:00:39 2026-09-05 16:23:51 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:25:53 2026-09-04 16:25:53 attacker malicious-activity
Hacking AbuseIPDB 2026-07-08 18:49:15 2026-07-13 10:50:36 attacker malicious-activity
HTTP Attacker AbuseIPDB 2026-07-08 20:29:15 2026-07-11 20:46:32 attacker malicious-activity
Proxy AbuseIPDB 2026-07-10 01:52:22 2026-07-11 18:53:47 anonymization proxy
Port Scanner AbuseIPDB 2026-07-10 01:52:22 2026-07-11 18:53:47 anomalous-activity attacker malicious-activity reconnaissance
SSH Attacker AbuseIPDB 2026-07-10 01:52:22 2026-07-11 18:53:47 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2026-07-09 06:14:49 2026-07-11 18:18:00 anomalous-activity attacker malicious-activity
SQL Injection AbuseIPDB 2026-07-09 16:44:14 2026-07-11 11:33:28 attacker malicious-activity
Bruteforce AbuseIPDB 2026-07-09 06:14:49 2026-07-11 10:18:40 attacker malicious-activity
Malicious Host AbuseIPDB 2026-07-09 20:28:01 2026-07-09 20:28:01 attacker compromised malicious-activity
DDoS Attacker AbuseIPDB 2026-07-08 21:48:26 2026-07-08 21:48:26 attacker malicious-activity

Tags

abuse

Whois information

AS name
AS6079 Nexus Bytes LLC
Registrant
Nexus Bytes LLC
City
Piscataway Township
State
NJ
Postal code
08854
Country
US — United States 🇺🇸
First indexed
2026-07-13 16:00:39
Last updated
2026-09-05 16:23:51