AbuseIPDB » 64.95.11.36

64.95.11.36 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 0%: ?

ISP	BL Networks
Usage Type	Data Center/Web Hosting/Transit
ASN	AS399629
Domain Name	blnwx.com
Country	United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 64.95.11.36

Whois 64.95.11.36

IP Abuse Reports for 64.95.11.36:

This IP address has been reported a total of 60 times from 38 distinct sources. 64.95.11.36 was first reported on November 5th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
JPPO	2024-11-05 15:25:09 (2 months ago)	4 hits : GET /.env or GET //.env with or without prefix	Web App Attack
JCB	2024-11-05 15:18:00 (2 months ago)	64.95.11.36 - - [05/Nov/2024:14:42:11 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Lin ... show more64.95.11.36 - - [05/Nov/2024:14:42:11 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Hacking Web App Attack
BlueWire Hosting	2024-11-05 15:10:17 (2 months ago)	Scanning for Laravel vulnerabilities	Web App Attack
Anonymous	2024-11-05 13:17:02 (2 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
mga.icgbio.ru	2024-11-05 13:05:30 (2 months ago)	64.95.11.36 - - [05/Nov/2024:20:05:29 +0700] "GET /.env HTTP/1.1" 404 69 "-" "Mozilla/5.0 (X11; Linu ... show more64.95.11.36 - - [05/Nov/2024:20:05:29 +0700] "GET /.env HTTP/1.1" 404 69 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 64.95.11.36 - - [05/Nov/2024:20:05:29 +0700] "GET /.env HTTP/1.1" 404 69 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 64.95.11.36 - - [05/Nov/2024:20:05:29 +0700] "GET /.env HTTP/1.1" 404 69 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack
Mr-Money	2024-11-05 12:59:23 (2 months ago)	64.95.11.36 - - [05/Nov/2024:13:59:22 +0100] "GET /.env HTTP/1.1" 404 5865 "-" "Mozilla/5.0 (X11; Li ... show more64.95.11.36 - - [05/Nov/2024:13:59:22 +0100] "GET /.env HTTP/1.1" 404 5865 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
TPI-Abuse	2024-11-05 12:48:56 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 07:48:51.130827 2024] [security2:error] [pid 17087:tid 17087] [client 64.95.11.36:48278] [client 64.95.11.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perlcreativedesign.com"] [uri "/.env"] [unique_id "ZyoUM5DtOTh60k_TgWiUPwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-05 12:27:16 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 07:27:11.647960 2024] [security2:error] [pid 12248:tid 12248] [client 64.95.11.36:57534] [client 64.95.11.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "p-co.com"] [uri "/.env"] [unique_id "ZyoPHyOG76MzrZ8CebshbwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
mawan	2024-11-05 12:02:17 (2 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
TPI-Abuse	2024-11-05 12:02:02 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 07:01:54.817997 2024] [security2:error] [pid 27827:tid 27827] [client 64.95.11.36:49584] [client 64.95.11.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pasdesinfos.com"] [uri "/.env"] [unique_id "ZyoJMgY7kFV0LMATT0YOOgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-05 11:44:26 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 06:44:23.362932 2024] [security2:error] [pid 20539:tid 20539] [client 64.95.11.36:57996] [client 64.95.11.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paragontechusa.com"] [uri "/.env"] [unique_id "ZyoFF06K_HblbKGotBwQQgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-11-05 11:26:19 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 06:26:14.667768 2024] [security2:error] [pid 4371:tid 4371] [client 64.95.11.36:39444] [client 64.95.11.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paguilar.com"] [uri "/.env"] [unique_id "ZyoA1ssC7NRt0T4qzR4v2wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
someone	2024-11-05 11:15:55 (2 months ago)	:443 64.95.11.36 - - [05/Nov/2024:12:15:54 +0100] "GET /.env HTTP/1.1" 404 7173 "-" "Mozilla/5.0 (X ... show more:443 64.95.11.36 - - [05/Nov/2024:12:15:54 +0100] "GET /.env HTTP/1.1" 404 7173 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
sefinek.net	2024-11-05 11:03:23 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: ... show moreTriggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE ASN: 399629 (BLNWX) Protocol: HTTP/1.1 (method POST) Domain: ny01-cf-mirror.sefinek.net Endpoint: / Timestamp: 2024-11-05T09:19:06Z Ray ID: 8ddbc2a0cae44629 Rule ID: cc5e7a6277d447eca9c1818934ba65c8 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 Report generated by Node-Cloudflare-WAF-AbuseIPDB https://github.com/sefinek/Node-Cloudflare-WAF-AbuseIPDB show less	Bad Web Bot
TPI-Abuse	2024-11-05 10:45:50 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210492) triggered by 64.95.11.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 05:45:45.548396 2024] [security2:error] [pid 1937:tid 2000] [client 64.95.11.36:45112] [client 64.95.11.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "orthopedica.org"] [uri "/.env"] [unique_id "Zyn3Wa_peM5Cha5_5a6M8wAAAdg"] show less	Brute-Force Bad Web Bot Web App Attack