AbuseIPDB » 64.49.39.220
64.49.39.220 was found in our database!
This IP was reported 9 times. Confidence of
Abuse
is 17% : ?
ISP
Hostaly LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS26548
Domain Name
hostaly.io
Country
πΊπΈ
United States of America
City
Seattle, Washington
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 64.49.39.220 :
This IP address has been reported a total of
9
times from
6 distinct
sources.
64.49.39.220 was first reported on
October 7th 2025 , and the most recent report was
2 weeks ago .
Old Reports:
The most recent abuse report for this IP address is from
2 weeks ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
πΊπΈ
TPI-Abuse
2026-06-06 07:04:39
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 64.49.39.220 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.49.39.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 03:04:29.934579 2026] [security2:error] [pid 19176:tid 19176] [client 64.49.39.220:37135] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.backstore.com|F|2"] [data ".losangelesseating.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.backstore.com"] [uri "/www.losangelesseating.com"] [unique_id "aiPGffnixoGF7p276gxBPQAAABA"], referer: http://www.backstore.com/Web-Sites.htm
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
HandyTreff.de
2026-05-19 00:20:28
(1 month ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.547 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.547 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.3193.1
show less
Web App Attack
Bad Web Bot
π¨π
backslash
2026-05-18 02:51:02
(1 month ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
π³π±
DrLex0
2026-05-01 05:27:22
(1 month ago)
Obvious distributed botnet crawlers operating from various AS that are likely all the same piece of ...
show more
Obvious distributed botnet crawlers operating from various AS that are likely all the same piece of crap split up in an attempt to confuse security systems
64.49.39.220 80 - [01/May/2026:05:27:22 +0000] "GET [redacted] HTTP/1.1" 410 760 "[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.4577.99 Safari/537.36"
show less
Bad Web Bot
π¨π
backslash
2026-04-16 14:21:21
(2 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
π¨π¦
wil.com
2025-11-29 21:39:34
(6 months ago)
GlobalProtect login attempts with user w.
VPN IP
Brute-Force
Anonymous
2025-10-16 18:19:20
(8 months ago)
wordpress-trap
Web App Attack
Anonymous
2025-10-13 23:46:18
(8 months ago)
wordpress-trap
Web App Attack
Anonymous
2025-10-07 19:02:59
(8 months ago)
wordpress-trap
Web App Attack
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown π©
Recently Reported IPs: