JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.49.39.53

64.49.39.53 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	Hostaly LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	hostaly.io
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.49.39.53

Whois 64.49.39.53

IP Abuse Reports for 64.49.39.53:

This IP address has been reported a total of 10 times from 8 distinct sources. 64.49.39.53 was first reported on June 23rd 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Bigbear3	2026-03-07 16:37:02 (3 months ago)	Report-by-bigbear3	Brute-Force SSH
🇺🇸 conrad10781	2026-02-05 01:13:10 (4 months ago)	nginx-wordpress	Web App Attack
Anonymous	2025-12-03 06:19:59 (6 months ago)	VPN endpoint login attempts, credential stuffing	Brute-Force
Anonymous	2025-12-03 00:37:56 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.03 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.03 is noted in report timestamp show less	Hacking Brute-Force
🇨🇿 lp	2025-12-02 01:25:47 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 64.49.39.53 2025-12-02T01:39:21+01:00 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 64.49.39.53 2025-12-02T01:39:21+01:00 vpn Access-Reject 'postmaster' station: 64.49.39.53 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-12-01 10:26:01 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 64.49.39.53 2025-12-01T11:02:00+01:00 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 64.49.39.53 2025-12-01T11:02:00+01:00 vpn Access-Reject 'mohamed' station: 64.49.39.53 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-01 18:38:41 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 64.49.39.53 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 64.49.39.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 14:38:35.525570 2025] [security2:error] [pid 7143:tid 7143] [client 64.49.39.53:61355] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|marshallcurry.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marshallcurry.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQZTq6_EPaMYMSxQExt4cQAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-15 14:33:07 (8 months ago)	(mod_security) mod_security (id:210350) triggered by 64.49.39.53 (64-49-39-53.cloudairone.com): 1 in ... show more (mod_security) mod_security (id:210350) triggered by 64.49.39.53 (64-49-39-53.cloudairone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 10:33:01.306237 2025] [security2:error] [pid 17092:tid 17092] [client 64.49.39.53:54525] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|madronabluff.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "madronabluff.com"] [uri "/"] [unique_id "aO-wnSJSm6Uaw8dN6QwxKgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2025-08-03 22:47:11 (10 months ago)	Fail2Ban apache-tripwires	Web App Attack
Anonymous	2025-06-23 17:25:25 (1 year ago)	FUNDATCOM WEBEXPLOIT 64.49.39.53 (64-49-39-53.cloudairone.com)	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 193.233.48.169

🇬🇧 193.163.125.151

🇨🇳 120.228.96.228

🇭🇰 199.45.154.145

🇷🇴 193.32.162.82

🇷🇺 82.208.65.46

🇩🇪 46.101.123.64

🇬🇧 35.203.210.244

🇯🇵 20.63.218.49

🇺🇸 205.210.31.67

🇺🇸 205.210.31.57

🇷🇺 92.126.223.175

🇷🇺 80.95.38.14

🇵🇭 58.69.56.44

🇰🇷 218.145.181.48

🇨🇳 120.48.99.236

🇺🇸 96.78.175.41

🇰🇷 61.76.112.4

🇻🇳 42.116.233.205

🇬🇧 35.203.210.123