AbuseIPDB » 64.71.152.206

64.71.152.206 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 25%: ?

25%

ISP	Shore Network Technologies
Usage Type	Fixed Line ISP
ASN	AS6939
Hostname(s)	206.0-24.152.71.64.in-addr.arpa
Domain Name	theshore.net
Country	United States of America
City	Fremont, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 64.71.152.206

Whois 64.71.152.206

IP Abuse Reports for 64.71.152.206:

This IP address has been reported a total of 12 times from 8 distinct sources. 64.71.152.206 was first reported on December 8th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
stypr	2024-12-09 06:50:03 (1 month ago)	Malicious activity detected on HTTP/HTTPS	Hacking Brute-Force Web App Attack
TPI-Abuse	2024-12-09 05:29:42 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 09 00:29:35.752176 2024] [security2:error] [pid 19622:tid 19622] [client 64.71.152.206:51037] [client 64.71.152.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.224"] [uri "/.env"] [unique_id "Z1aAPwQNfrVSIVl1R3dw9QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-12-09 04:56:03 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 08 23:55:59.747718 2024] [security2:error] [pid 5230:tid 5230] [client 64.71.152.206:58718] [client 64.71.152.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.15"] [uri "/.env"] [unique_id "Z1Z4X5UFvQtkQMIaF1lgMgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-12-09 04:16:51 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 08 23:16:46.145272 2024] [security2:error] [pid 10960:tid 10978] [client 64.71.152.206:58207] [client 64.71.152.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.128"] [uri "/.env"] [unique_id "Z1ZvLonWRL5d9OPzJVtscQAAAQk"] show less	Brute-Force Bad Web Bot Web App Attack
RF68	2024-12-09 02:35:37 (1 month ago)	64.71.152.206 [09/Dec/2024 Spam host detected, probing for vulnerabilities] ...	Web Spam Exploited Host Web App Attack
Anonymous	2024-12-09 00:53:13 (1 month ago)	64.71.152.206 - - [09/Dec/2024:00:53:12 +0000] "GET /.env HTTP/1.1" 404 134 "-" "python-requests/2.3 ... show more64.71.152.206 - - [09/Dec/2024:00:53:12 +0000] "GET /.env HTTP/1.1" 404 134 "-" "python-requests/2.32.3" ... show less	Hacking Web App Attack
paulshipley.com.au	2024-12-08 23:51:36 (1 month ago)	paulshipley.com.au:443 64.71.152.206 - - [09/Dec/2024:10:48:09 +1100] "GET /.env HTTP/1.1" 403 3562 ... show morepaulshipley.com.au:443 64.71.152.206 - - [09/Dec/2024:10:48:09 +1100] "GET /.env HTTP/1.1" 403 3562 "-" "python-requests/2.32.3" paulshipley.com.au:443 64.71.152.206 - - [09/Dec/2024:10:48:32 +1100] "GET /API/.env HTTP/1.1" 403 3563 "-" "python-requests/2.32.3" paulshipley.com.au:443 64.71.152.206 - - [09/Dec/2024:10:48:54 +1100] "GET /.env.example HTTP/1.1" 403 3563 "-" "python-requests/2.32.3" paulshipley.com.au:443 64.71.152.206 - - [09/Dec/2024:10:49:17 +1100] "GET /api/.env HTTP/1.1" 403 3562 "-" "python-requests/2.32.3" paulshipley.com.au:443 64.71.152.206 - - [09/Dec/2024:10:49:39 +1100] "GET /server/.env HTTP/1.1" 403 3562 "-" "python-requests/2.32.3" paulshipley.com.au:443 64.71.152.206 - - [09/Dec/2024:10:50:01 +1100] "GET /blog HTTP/1.1" 404 68404 "-" "python-requests/2.32.3" paulshipley.com.au:443 64.71.152.206 - - [09/Dec/2024:10:50:26 +1100] "GET /.blog HTTP/1.1" 404 68404 "-" "python-requests/2.32.3" paulshipley.com.au:443 64.71.152.206 - - [09/Dec/2024:10:50:50 +1100] " ... show less	Web App Attack
sid3windr	2024-12-08 23:43:34 (1 month ago)	GET /.env (Tarpitted for , wasted 0B)	Web App Attack
TPI-Abuse	2024-12-08 22:57:07 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 08 17:57:01.504760 2024] [security2:error] [pid 1675013:tid 1675013] [client 64.71.152.206:51869] [client 64.71.152.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.28"] [uri "/.env"] [unique_id "Z1YkPe345Aw5r8Suc2qBHwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
security.yc3a.com	2024-12-08 22:27:13 (1 month ago)	64.71.152.206 - - [08/Dec/2024:22:27:12 +0000] "GET /api/.env HTTP/1.1" 404 146 "-" "python-requests ... show more64.71.152.206 - - [08/Dec/2024:22:27:12 +0000] "GET /api/.env HTTP/1.1" 404 146 "-" "python-requests/2.32.3" show less	Brute-Force Web App Attack
Pornomens	2024-12-08 22:18:50 (1 month ago)	64.71.152.206 - - [08/Dec/2024:23:18:15 +0100] "GET /.env HTTP/1.1" 403 473 "-" "python-requests/2.3 ... show more64.71.152.206 - - [08/Dec/2024:23:18:15 +0100] "GET /.env HTTP/1.1" 403 473 "-" "python-requests/2.32.3" 64.71.152.206 - - [08/Dec/2024:23:18:32 +0100] "GET /API/.env HTTP/1.1" 403 473 "-" "python-requests/2.32.3" 64.71.152.206 - - [08/Dec/2024:23:18:49 +0100] "GET /.env.example HTTP/1.1" 403 473 "-" "python-requests/2.32.3" ... show less	Web App Attack
TPI-Abuse	2024-12-08 22:04:51 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:210492) triggered by 64.71.152.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 08 17:04:45.547874 2024] [security2:error] [pid 29438:tid 29438] [client 64.71.152.206:53827] [client 64.71.152.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.63"] [uri "/.env"] [unique_id "Z1YX_ekdj8Tn4tRUfEVIIwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack