JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.64.117.193

192.64.117.193 was found in our database!

This IP was reported 1,166 times. Confidence of Abuse is 100%: ?

100%

ISP	Namecheap, Inc.
Usage Type	Content Delivery Network
ASN	AS22612
Hostname(s)	server304.web-hosting.com
Domain Name	namecheap.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.64.117.193

Whois 192.64.117.193

IP Abuse Reports for 192.64.117.193:

This IP address has been reported a total of 1,166 times from 222 distinct sources. 192.64.117.193 was first reported on February 19th 2022, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hazzard	2026-08-27 22:43:31 (1 hour ago)	(wordpress) Failed wordpress login from 192.64.117.193 (US/United States/-/-/server304.web-hosting.c ... show more (wordpress) Failed wordpress login from 192.64.117.193 (US/United States/-/-/server304.web-hosting.com/[redacted]): (CF_ENABLE) show less	Brute-Force
Anonymous	2026-08-27 22:00:47 (1 hour ago)	Network service scanning detected by FortiGate; source quarantined.	Port Scan
🇩🇪 juutis	2026-08-27 20:19:03 (3 hours ago)	192.64.117.193 - - [27/Aug/2026:17:38:04 +0200] "POST /wp-login.php HTTP/1.1" 200 9603 "https://taid ... show more 192.64.117.193 - - [27/Aug/2026:17:38:04 +0200] "POST /wp-login.php HTTP/1.1" 200 9603 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.64.117.193 - - [27/Aug/2026:18:41:44 +0200] "POST /wp-login.php HTTP/1.1" 200 9603 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 192.64.117.193 - - [27/Aug/2026:22:19:02 +0200] "POST /wp-login.php HTTP/1.1" 200 9603 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-08-27 19:12:09 (4 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 ger-stg-sifi1	2026-08-27 18:43:42 (5 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇷🇴 SpamStopper	2026-08-27 18:18:27 (5 hours ago)	Fail2Ban - WP Spoofing	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 17:17:02 (6 hours ago)	(mod_security) mod_security (id:225170) triggered by 192.64.117.193 (server304.web-hosting.com): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 192.64.117.193 (server304.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 13:16:55.989352 2026] [security2:error] [pid 5611:tid 5611] [client 192.64.117.193:46168] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|grandpont-house.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grandpont-house.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apBxBwEOh68p8qdYEDzq2gAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-08-27 17:15:30 (6 hours ago)	2026-08-27T19:15:28.417938+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 192.64.117. ... show more 2026-08-27T19:15:28.417938+02:00 ipoac.nl wordpress(-)-: Authentication failure for-from 192.64.117.193 show less	Web App Attack
🇫🇷 LRob	2026-08-27 15:59:29 (7 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users/me \| 2026-08-27 15:59 UTC show less	Hacking Web App Attack
🇹🇷 oalver	2026-08-27 13:28:05 (10 hours ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-27. Risk score: 30/100. show less	Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-27 12:08:10 (11 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 kosada.com	2026-08-27 10:38:48 (13 hours ago)	Web password guessing	Brute-Force
Anonymous	2026-08-27 10:24:20 (13 hours ago)	Failed Wordpress Logins	Web App Attack
🇩🇪 karger	2026-08-27 09:24:22 (14 hours ago)	Wordpress attack - soft filter	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 09:05:30 (14 hours ago)	(mod_security) mod_security (id:225170) triggered by 192.64.117.193 (server304.web-hosting.com): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 192.64.117.193 (server304.web-hosting.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 05:05:25.680147 2026] [security2:error] [pid 23838:tid 23838] [client 192.64.117.193:52346] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barkatthemoonpetsitting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barkatthemoonpetsitting.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ao_91YjV2yYxPN7f5lQK9gAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 1166 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2400:cb00:119:1000:d044:bdd9:fd37:76bf

🇲🇴 182.93.50.90

🇬🇧 81.77.189.147

🇺🇸 66.249.77.163

🇪🇹 196.189.236.151

🇫🇮 135.181.213.156

🇯🇵 103.4.11.207

🇵🇱 87.206.87.34

🇺🇸 34.135.88.150

🇫🇷 172.69.223.41

🇿🇦 165.49.223.162

🇺🇸 152.32.236.116

🇬🇧 62.60.130.253

🇱🇹 62.60.130.201

🇨🇳 1.180.45.92

🇫🇷 2001:41d0:303:6eca::1

🇫🇷 2001:41d0:303:4ee1::1

🇨🇳 221.214.181.197

🇫🇷 172.69.223.42

🇺🇸 162.216.149.194