64.89.192.97
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- WorldNet Telecommunications, LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS11367
- Hostname(s)
- 64-89-192-97.static.wntpr.net
- Domain Name
- worldnetpr.com
- Country
- 🇵🇷 Puerto Rico
- City
- San Juan, San Juan
Abuse Reports
Total reports
58 from
38 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Alvino |
Blocked due to abuseScore: 84
|
Web Spam Hacking Web App Attack | |
| 🇳🇱 BlueWire Hosting |
Probing websites for vulnerabilities
|
Web App Attack | |
| 🇳🇱 Site.eu |
Repeated wp-login/xmlrpc attempts
|
Brute-Force SSH | |
| 🇩🇪 4server |
|
Port Scan Brute-Force Web App Attack | |
| 🇬🇷 setupgr |
|
Port Scan | |
| 🇺🇸 aldo |
1 request(s) in 24h for 1 sensitive path(s) that do not exist on this site (e.g. /xmlrpc.php), including 1 login guess(es). Automated report from a passive sensor: https://digimasi.com/en/research/methodology/
|
Web App Attack Bad Web Bot Brute-Force | |
| 🇺🇸 WellSpring |
xmlrpc exploit on wellspr.ing/xmlrpc.php — WellSpr.ing/NetSentinel civic-AI security layer
|
Brute-Force Web App Attack | |
| 🇩🇪 stinpriza |
Web App Attack
|
Web App Attack | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇩🇪 Hazzard |
(wordpress) Failed wordpress login from 64.89.192.97 (PR/Puerto Rico/-/San Juan/64-89-192-97.static.wntpr.net/[redacted]): (CF_ENABLE)
|
Brute-Force | |
| 🇺🇸 lostswordfish.com |
Wordfence waf block on fairregistry
|
Web App Attack | |
| Anonymous |
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack | |
| 🇦🇺 electronico |
64.89.192.97 - - [08/Oct/2026:05:34:55 +1100] "POST /xmlrpc.php HTTP/1.1" 404 6063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/90.0.0.0 Safari/537.36"
...
|
Brute-Force Web App Attack | |
| 🇩🇪 ISPLtd |
64.89.192.97 [07/Oct/2026:12:54:17 -0300] victaxes.ca:443 URL:/xmlrpc.php "POST /xmlrpc.php
64.89.192.97 [07/Oct/2026:12:54:20 -0300] victaxes.com:443 URL:/xmlrpc.php "POST /xmlrpc.php
...
|
Hacking Web App Attack | |
| 🇩🇪 LRob |
Web exploit attempt | method: GET | path: /wp-json/wp/v2/users | ua: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown