AbuseIPDB » 64.95.11.36

64.95.11.36 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 61%: ?

61%

ISP	BL Networks
Usage Type	Data Center/Web Hosting/Transit
Domain Name	blnwx.com
Country	United States of America
City	Dallas, Texas

Report 64.95.11.36

Whois 64.95.11.36

IP Abuse Reports for 64.95.11.36:

This IP address has been reported a total of 60 times from 38 distinct sources. 64.95.11.36 was first reported on November 5th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
geot	2024-11-07 13:26:20 (1 month ago)	GET /.env HTTP/1.1 POST / HTTP/1.1	Port Scan Hacking Web App Attack
ut-addicted.com	2024-11-06 18:23:55 (1 month ago)	\[Wed Nov 06 19:23:53.680473 2024\] \[:error\] \[pid 412:tid 140449257801472\] \[client 64.95.11.36: ... show more\[Wed Nov 06 19:23:53.680473 2024\] \[:error\] \[pid 412:tid 140449257801472\] \[client 64.95.11.36:36892\] \[client 64.95.11.36\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "ut-addicted.com"\] \[uri "/.env"\] \[unique_id "Zyu0OYgZ84gcI9I87NkBBgAAABU"\] show less	Brute-Force Web App Attack
URAN Publishing Service	2024-11-06 18:03:46 (1 month ago)	64.95.11.36 - - [06/Nov/2024:20:03:46 +0200] "GET /.env HTTP/1.1" 404 2880 "-" "Mozilla/5.0 (X11; Li ... show more64.95.11.36 - - [06/Nov/2024:20:03:46 +0200] "GET /.env HTTP/1.1" 404 2880 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
peterh	2024-11-06 17:58:00 (1 month ago)	64.95.11.36 - - [06/Nov/2024:18:29:49 +0100] "GET /.env HTTP/1.1" 64.95.11.36 - - [06/Nov/202 ... show more64.95.11.36 - - [06/Nov/2024:18:29:49 +0100] "GET /.env HTTP/1.1" 64.95.11.36 - - [06/Nov/2024:18:29:50 +0100] "POST / HTTP/1.1" show less	Phishing Hacking
Anonymous	2024-11-06 16:36:02 (1 month ago)	2024/11/06 17:36:00 [error] 4011#4011: 3689940 access forbidden by rule, client: 64.95.11.36, serve ... show more2024/11/06 17:36:00 [error] 4011#4011: 3689940 access forbidden by rule, client: 64.95.11.36, server: aide.bobelweb.eu, request: "GET /.env HTTP/1.1", host: "todo.stage.livedata.fr" show less	Brute-Force Web App Attack
Anonymous	2024-11-06 14:44:19 (1 month ago)	CMS/WebApp Exploit attempt	Web App Attack
Anonymous	2024-11-06 10:50:15 (1 month ago)	Automatic report - Vulnerability scan /	Web App Attack
URAN Publishing Service	2024-11-06 10:34:00 (1 month ago)	64.95.11.36 - - [06/Nov/2024:12:33:58 +0200] "GET /.env HTTP/1.1" 404 2874 "-" "Mozilla/5.0 (X11; Li ... show more64.95.11.36 - - [06/Nov/2024:12:33:58 +0200] "GET /.env HTTP/1.1" 404 2874 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
MHuiG	2024-11-06 10:09:17 (1 month ago)	The IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 399 ... show moreThe IP has triggered Cloudflare WAF. action: managed_challenge source: firewallCustom clientAsn: 399629 clientASNDescription: BLNWX clientCountryName: US clientIP: 64.95.11.36 clientRequestHTTPHost: rssbox.mhuig.top clientRequestHTTPMethodName: POST clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: / clientRequestQuery: datetime: 2024-11-06T09:03:50Z rayName: 8de3e9a73fa8e82f ruleId: f4a2c940dd7944e58e72d246ea29b5af userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
nextweb	2024-11-06 09:41:07 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (US/United States/Texas/Dallas/-/[A ... show more(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (US/United States/Texas/Dallas/-/[AS399629 BLNWX]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
Sipo Chutão	2024-11-06 01:00:01 (1 month ago)	.env	Hacking
Anonymous	2024-11-06 00:00:21 (1 month ago)	scanning for sensitive files: /.env	Web App Attack
sdos.es	2024-11-05 23:43:48 (1 month ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
URAN Publishing Service	2024-11-05 23:12:27 (1 month ago)	64.95.11.36 - - [06/Nov/2024:01:12:26 +0200] "GET /.env HTTP/1.1" 404 2874 "-" "Mozilla/5.0 (X11; Li ... show more64.95.11.36 - - [06/Nov/2024:01:12:26 +0200] "GET /.env HTTP/1.1" 404 2874 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
Guardian	2024-11-05 22:45:42 (1 month ago)	Unauthorized attempt to retrieve configuration file 64.95.11.36 [05/Nov/2024:22:45:42] "GET /. ... show moreUnauthorized attempt to retrieve configuration file 64.95.11.36 [05/Nov/2024:22:45:42] "GET /.env HTTP/1.1" 64.95.11.36 [05/Nov/2024:22:45:42] "GET /.env HTTP/1.1" show less	Port Scan Web App Attack