JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.52.80.184

64.52.80.184 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 79%: ?

79%

ISP	BL Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399629
Domain Name	blnwx.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.52.80.184

Whois 64.52.80.184

IP Abuse Reports for 64.52.80.184:

This IP address has been reported a total of 21 times from 13 distinct sources. 64.52.80.184 was first reported on July 26th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Ba-Yu	2026-07-28 14:46:14 (4 hours ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 14:10:53 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 10:10:46.873468 2026] [security2:error] [pid 94715:tid 94715] [client 64.52.80.184:43174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zoesaadeh.com.saadeh.ws"] [uri "/.env"] [unique_id "ami4ZioTjYfYsNSjNCba-AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-28 12:05:58 (7 hours ago)	Blocked: Reason='Suspicious traffic score=90 (review-based detection)'; Requests=12	Hacking
🇫🇷 MatStef132	2026-07-28 11:48:15 (7 hours ago)	MatShield L7: blocked on nms.mathost.eu (secret-path-probe)	DDoS Attack
🇺🇸 TPI-Abuse	2026-07-28 11:24:31 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 07:24:25.388093 2026] [security2:error] [pid 1777611:tid 1777611] [client 64.52.80.184:53932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbrcabrero.cl.tecnoconce.com"] [uri "/.env"] [unique_id "amiRaUd1KRG6CkDi5veDhgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 08:34:15 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 04:34:10.139062 2026] [security2:error] [pid 3482903:tid 3482919] [client 64.52.80.184:38878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ntv.myrasnyder.com"] [uri "/.env"] [unique_id "amhpgmZ97n0jX-7lmO9YxAAAAIc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 18:41:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 14:40:58.958578 2026] [security2:error] [pid 16816:tid 16816] [client 64.52.80.184:37600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.app.handyrehab.com"] [uri "/.env"] [unique_id "amemOsiCo7mhU-4AOogSUwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 18:20:19 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 14:20:13.995630 2026] [security2:error] [pid 701:tid 701] [client 64.52.80.184:43614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aireaconditionado.aguasolar.com"] [uri "/.env"] [unique_id "amehXZ-X1JjjE2pR2BqrPwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 17:15:04 (1 day ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 15:47:00 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:46:55.551849 2026] [security2:error] [pid 1372093:tid 1372093] [client 64.52.80.184:56004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.playerpianosupplies.com.player-care.com"] [uri "/.env"] [unique_id "amd9bwIZJ_zWT4YdP8n9LQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-07-27 15:36:29 (1 day ago)	Plesk Fail2Ban jail: plesk-apache-badbot. Evidence: 64.52.80.184 - - [27/Jul/2026:10:57:32 +0300] "G ... show more Plesk Fail2Ban jail: plesk-apache-badbot. Evidence: 64.52.80.184 - - [27/Jul/2026:10:57:32 +0300] "GET /.env HTTP/1.1" 404 808 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.1; +https://openai.com/gptbot" show less	Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-27 14:05:29 (1 day ago)	Abuse Detected (94)	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-07-27 13:49:45 (1 day ago)	Multiple unauthorized connection attempts	Web App Attack
🇦🇺 Bay13	2026-07-27 13:12:27 (1 day ago)	CrowdSec:custom/http-sensitive-files	Web App Attack
🇩🇪 grassau.com	2026-07-27 08:51:30 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 64.52.80.184 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 64.52.80.184 (US/United States/California/Los Angeles/-) show less	Bad Web Bot

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.79.218.164

🇪🇬 154.182.149.182

🇮🇩 103.172.20.218

🇬🇧 35.203.210.190

🇺🇸 12.156.67.18

🇺🇦 176.38.14.247

🇨🇳 171.222.249.238

🇬🇧 109.249.0.65

🇺🇸 52.54.157.23

🇫🇷 51.77.221.142

🇳🇱 45.148.10.157

🇰🇷 218.150.184.241

🇳🇱 216.57.110.81

🇳🇱 192.253.248.215

🇬🇧 159.65.17.139

🇺🇸 147.185.132.193

🇺🇸 128.199.8.140

🇰🇷 119.196.213.196

🇻🇳 116.99.171.249

🇵🇪 190.223.60.209