JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.49.38.93

64.49.38.93 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 24%: ?

24%

ISP	Hostaly LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	hostaly.io
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.49.38.93

Whois 64.49.38.93

IP Abuse Reports for 64.49.38.93:

This IP address has been reported a total of 12 times from 9 distinct sources. 64.49.38.93 was first reported on November 12th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-22 11:05:16 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 64.49.38.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 64.49.38.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:05:07.663838 2026] [security2:error] [pid 3726:tid 3726] [client 64.49.38.93:17983] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.femmefire.vanemby.com\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.femmefire.vanemby.com"] [uri "/wp-config.inc"] [unique_id "ahA4Y3kPqgam5gj-lXZEOAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-05-21 18:45:09 (2 weeks ago)	WP Config Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 19:15:00 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.49.38.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 64.49.38.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 15:14:51.345206 2026] [security2:error] [pid 28917:tid 28917] [client 64.49.38.93:49951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iconflgc.com"] [uri "/wp-config.php.save"] [unique_id "ag4IK7OoXBdqMxFb6SIW2wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 12:48:49 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 64.49.38.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 64.49.38.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:48:40.766274 2026] [security2:error] [pid 27344:tid 27344] [client 64.49.38.93:44327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joeordie.com"] [uri "/wp-config.txt"] [unique_id "ag2tqCjffF2V76WzKpU22QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-17 20:18:17 (2 weeks ago)	(wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 64. ... show more (wp-php-upload-includes) Block attempt to access .php in uploads wordpress uploads or well-known 64.49.38.93 (US/United States/-) show less	Brute-Force
🇺🇸 Matthew Ping	2026-05-17 02:15:01 (3 weeks ago)	ModSecurity rule 949110 triggered on dedicated. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
Anonymous	2026-04-17 22:40:34 (1 month ago)	Forum/form spam	Web Spam
🇫🇷 mrcrassi	2026-03-30 12:47:48 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: curl/7.88.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-02-25 19:09:54 (3 months ago)	Unauthorized VPN Login Attempt	Brute-Force Web App Attack
Anonymous	2026-02-21 22:18:24 (3 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2026-02-19 22:13:34 (3 months ago)	GlobalProtect Password Spraying	Brute-Force
🇩🇪 f2_IT	2025-11-12 16:46:59 (6 months ago)	SSLVPN Login attempt (blocked type h) from 64.49.38.93	Brute-Force

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a00:1450:4013:c14::123

🇺🇿 185.213.230.47

🇳🇱 172.253.82.213

🇺🇸 142.93.199.200

🇺🇸 66.132.172.247

🇺🇸 18.118.107.104

🇲🇽 186.96.145.241

🇧🇷 177.76.134.111

🇸🇬 165.154.205.128

🇳🇱 45.142.193.53

🇹🇭 43.173.252.20

🇨🇳 221.226.39.202

🇬🇧 185.192.69.170

🇺🇸 52.224.109.126

🇳🇱 45.198.224.7

🇹🇷 149.50.240.190

🇮🇳 135.235.138.43

🇫🇷 104.28.211.187

🇮🇳 103.181.161.42

🇺🇸 66.78.171.126