JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.49.39.188

64.49.39.188 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 12%: ?

12%

ISP	Hostaly LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	hostaly.io
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.49.39.188

Whois 64.49.39.188

IP Abuse Reports for 64.49.39.188:

This IP address has been reported a total of 14 times from 12 distinct sources. 64.49.39.188 was first reported on September 21st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-06-12 01:19:17 (1 week ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-06-03 04:46:11 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 64.49.39.188 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 64.49.39.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:45:21.908156 2026] [security2:error] [pid 8990:tid 8990] [client 64.49.39.188:32281] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Cooper 4578/Thumbs.db"] [unique_id "ah-xYaaA9TLxZVEOFAdcYAAAAAk"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Cooper%204578/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HandyTreff.de	2026-04-17 13:21:20 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -39.428 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -39.428 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1822.9 show less	Web App Attack Bad Web Bot
🇨🇭 backslash	2026-04-16 11:57:13 (2 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 oralunal	2026-03-17 19:23:47 (3 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 mind5t0rm	2026-02-05 01:04:37 (4 months ago)	(XMLRPC) WP XMLPRC Attack 64.49.39.188 (US/United States/-): 3 in the last 3600 secs; Ports: ; Dire ... show more (XMLRPC) WP XMLPRC Attack 64.49.39.188 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 64.49.39.188 - - [05/Feb/2026:08:04:28 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/7.88.1" 64.49.39.188 - - [05/Feb/2026:08:04:29 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4" 64.49.39.188 - - [05/Feb/2026:08:04:30 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "Wget/1.21.4" show less	Port Scan
🇫🇷 masterguru	2025-12-23 11:22:43 (6 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 64.49.39.188 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 64.49.39.188 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇱🇻 garmtech.com	2025-12-21 19:54:28 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇸🇬 Vano Ganzzz	2025-11-29 11:10:20 (6 months ago)	Triggered Cloudflare WAF (ratelimit) from US. Action taken: BLOCK ASN: 26548 (PUREVOLTAGE-INC) Proto ... show more Triggered Cloudflare WAF (ratelimit) from US. Action taken: BLOCK ASN: 26548 (PUREVOLTAGE-INC) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2025-11-29T11:10:20Z Ray ID: 9a61a872c9e13119 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2025-11-21 06:25:57 (7 months ago)	VPN endpoint login attempts	Brute-Force
🇺🇸 nowyouknow	2025-11-19 07:19:23 (7 months ago)	(From [email protected]) Hello, We’ve helped thousands of businesses worldwide improve th ... show more (From [email protected]) Hello, We’ve helped thousands of businesses worldwide improve their website accessibility, and after reviewing your site, we believe we can help you too. An inaccessible website can cost you customers — and even lead to legal risks. We’re offering you an easy way to get started: - Free Accessibility Scan - Free Detailed Report - Free First Fix Get started now: http://scan4.free Best regards, The PLURO Team Whenever you no longer want to receive subsequent communications from this campaign, just fill the form at bit. ly/fillunsubform with your domain address (URL). Stra?E Der Pariser Kommune 93, Bridgehampton, CA, USA, 95568 show less	Phishing Web Spam
Anonymous	2025-11-17 08:49:18 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
🇨🇭 backslash	2025-11-11 20:45:56 (7 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-21 08:07:08 (9 months ago)	(mod_security) mod_security (id:210831) triggered by 64.49.39.188 (64-49-39-188.cloudairone.com): 1 ... show more (mod_security) mod_security (id:210831) triggered by 64.49.39.188 (64-49-39-188.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 04:06:55.619466 2025] [security2:error] [pid 3083:tid 3083] [client 64.49.39.188:61053] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/"] [unique_id "aM-yH5T6ODfFTtO_ZeI1JwAAABc"], referer: https://www.toto-joy.com/major-site/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 158.101.161.27

🇸🇳 154.124.135.74

🇮🇳 103.212.145.69

🇧🇷 207.248.16.75

🇨🇳 203.2.112.125

🇲🇽 189.203.231.22

🇧🇷 186.226.195.40

🇧🇩 182.48.80.240

🇸🇦 176.16.202.142

🇨🇳 119.29.93.87

🇺🇸 100.36.219.166

🇫🇷 91.168.199.78

🇬🇧 83.136.251.36

🇺🇸 69.74.29.21

🇺🇸 63.77.29.83

🇬🇧 217.146.80.110

🇵🇰 157.10.7.192

🇫🇮 147.185.133.149

🇳🇱 109.172.93.14

🇳🇱 93.123.72.183