This IP address has been reported a total of
74
times from
50 distinct
sources.
64.205.112.99 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 25
reports;
Germany
with 16
reports;
Netherlands
with 7
reports.
The most common categories in these recent reports were:
Web App Attack
57
times;
Bad Web Bot
35
times;
Brute-Force
29
times;
Hacking
11
times;
Port Scan
4
times;
Other
7
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, TEMPDENY 64.205.112.99, Rea ...
show moreCluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, TEMPDENY 64.205.112.99, Reason:[64.205.112.99 (US/United States/-), more than 60 Apache 404 hits in the last 3600 secs]; Ports: 80,443; Direction: in; Trigger: LF_CLUSTER; Logs:
show less
(wpscan) WordPress probe detected from 64.205.112.99 (US/United States/-)
Hacking
Anonymous
Automated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php ...
show moreAutomated web scanner. Requested suspicious paths: /wp-content/plugins/hellopress/wp_filemanager.php. UTC: 2026-10-21 20:04:35.
show less
{"level":"info","ts":1792604730.1770823,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792604730.1770823,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"64.205.112.99","remote_port":"56562","client_ip":"64.205.112.99","proto":"HTTP/1.1","method":"GET","host":"blog.1ifw.status.updown.io","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000160958,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://blog.1ifw.status.updown.io/wp-content/plugins/hellopress/wp_filemanager.php"],"Content-Type":[]}}
{"level":"info","ts":1792607792.9125881,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"64.205.112.99","remote_port":"59427","client_ip":"64.205.112.99","proto":"HTTP/1.1","method":"GET","host":"hqn4.status.updown.io","uri":"/wp-content/plugins/hellopress/wp_filemanager.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000079282,"size":0,"status":308,"resp_headers":{"Location":[
...
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 64.205.112.99 (US/United States/-): 2 ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 64.205.112.99 (US/United States/-): 2 in the last 3600 secs (0-196)
show less
Hacking
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning
show less
