JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.52.80.244

64.52.80.244 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 64%: ?

64%

ISP	BL Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399629
Domain Name	blnwx.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.52.80.244

Whois 64.52.80.244

IP Abuse Reports for 64.52.80.244:

This IP address has been reported a total of 23 times from 13 distinct sources. 64.52.80.244 was first reported on July 4th 2024, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇴 Bots.go.to.hell	2026-07-28 00:39:04 (22 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/vpatch-env-access	Web App Attack Hacking
🇮🇹 CoreTech srl	2026-07-27 23:18:55 (23 hours ago)	cloudlinux2 fail2ban: 2026-07-28 01:14:04,587 fail2ban.filter [1917]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-28 01:14:04,587 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 64.52.80.244 - 2026-07-28 01:14:04cloudlinux2 fail2ban: 2026-07-28 01:14:32,932 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 104.207.45.55 - 2026-07-28 01:14:32cloudlinux2 fail2ban: 2026-07-28 01:14:34,453 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 65.111.4.172 - 2026-07-28 01:14:33cloudlinux2 fail2ban: 2026-07-28 01:14:39,891 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 106.0.62.78 - 2026-07-28 01:14:39cloudlinux2 fail2ban: 2026-07-28 01:15:05,899 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 104.207.47.241 - 2026-07-28 01:15:05cloudlinux2 fail2ban: 2026-07-28 01:15:04,322 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 104.207.47.40 - 2026-07-28 01:15:03cloudlinux2 fail2ban: 2026-07-28 01:15:07,504 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 65.111.9.249 - 2026-07-28 01:15:06cloudlinu show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 19:47:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 15:47:40.360511 2026] [security2:error] [pid 24901:tid 24901] [client 64.52.80.244:52192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.catholicshoppercom.frankpollicino.com"] [uri "/.env"] [unique_id "ame13BwfnpaT0RRB4SIxkwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 16:09:17 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 12:09:10.637046 2026] [security2:error] [pid 382310:tid 382310] [client 64.52.80.244:47496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winterspring.net.terazon.net"] [uri "/.env"] [unique_id "ameCpu1nXpPq1nYYTnvUegAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-07-27 16:02:54 (1 day ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 FreeMyIP	2026-07-27 15:08:19 (1 day ago)	Automated fail2ban report: web application attack / scanning for exploitable paths.	Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-07-27 14:23:34 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 64.52.80.244 (US/Uni ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 64.52.80.244 (US/United States/California/Los Angeles/-) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-27 13:15:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:15:19.035807 2026] [security2:error] [pid 1622402:tid 1622402] [client 64.52.80.244:57436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.francisfell.com.themediaplanet.com"] [uri "/.env"] [unique_id "amdZ50aIcY9lV7KuD6TyFAAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-27 12:30:02 (1 day ago)	suspicious request in access.log	Web App Attack
🇫🇷 masterguru	2026-07-27 09:48:27 (1 day ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 09:38:51 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:38:47.064603 2026] [security2:error] [pid 259667:tid 259667] [client 64.52.80.244:56760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.atlantaconstruction.com"] [uri "/.env"] [unique_id "amcnJ-S-2Tekqc1To2VxOQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 09:13:46 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:13:39.525571 2026] [security2:error] [pid 378404:tid 378404] [client 64.52.80.244:53408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.music.garretthillary.com"] [uri "/.env"] [unique_id "amchQ9hY03vn4_xNOcAtwwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 07:42:16 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:42:12.134182 2026] [security2:error] [pid 29123:tid 29123] [client 64.52.80.244:47698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fantasysportstherapy1.michaelward.com"] [uri "/.env"] [unique_id "amcL1M8gOV7u0ZHOjzE1HQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-07-27 05:48:06 (1 day ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-07-26 11:10:33 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 64.52.80.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 07:10:26.468330 2026] [security2:error] [pid 4058047:tid 4058099] [client 64.52.80.244:41752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gardenclub.ramona.town"] [uri "/.env"] [unique_id "amXrIq9RS1MIuqOZhzlfYwAAANI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.238

🇪🇬 197.199.224.52

🇲🇽 189.231.127.47

🇨🇳 101.42.49.48

🇮🇱 84.111.136.210

🇸🇪 77.53.193.47

🇮🇶 65.20.131.63

🇷🇺 46.8.245.100

🇭🇰 199.45.154.178

🇦🇷 186.39.87.147

🇮🇷 185.116.161.214

🇫🇷 91.196.152.201

🇧🇷 201.46.20.116

🇻🇳 103.189.208.13

🇧🇩 103.178.30.59

🇺🇸 69.12.80.254

🇮🇶 65.20.143.51

🇳🇱 45.148.10.141

🇭🇰 199.45.155.109

🇸🇬 193.37.32.166