64.225.107.91
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
64 from
42 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 NXO WAN |
SMTP unauthorized access
|
Port Scan Brute-Force | |
| 🇫🇷 pwozniak |
lost connection after CONNECT from unknown[64.225.107.91]
|
Brute-Force | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 14 payload-bearing connection/event(s), 873 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 1234.
|
Port Scan Hacking | |
| Anonymous |
64.225.107.91 - - [11/Nov/2026:12:45:15 +0100] "GET / HTTP/1.1" 403 5740 "-" "-" ...
|
Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 2525 [15] TCP
|
Port Scan | |
| Anonymous |
|
Email Spam Brute-Force | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 8 application-level events across 8 source port(s). Sensor(s): H0neytr4p.
|
Port Scan | |
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | |
| 🇧🇷 radardatelecom |
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot Web App Attack | |
| 🇧🇬 dc67.bid |
Automated report: 23 events (nginx=23), Wazuh
|
Web App Attack | |
| 🇺🇸 knock |
Knock-Knock honeypot brute-force: Telnet (1 total hits)
|
Brute-Force | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 13 payload-bearing connection/event(s), 866 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 4891.
|
Port Scan Hacking | |
| 🇫🇷 superclaw_sec |
30x [host]_auth_fail via dovecot on [host] in 60m. pts in 0 secs): user=[redacted] rip=64.225.107.91, lip=[our-ip], TLS handshaking: SSL_accept() failed: error:0A00010B:SSL routines::wrong version number, session=<9bxdOepfHWJA4Wtb>
|
Brute-Force | |
| 🇩🇪 Marcin Stepien |
Hit honeypot endpoint /hnap1. Automated scanner/bot detected.
|
Bad Web Bot Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 13 Dionaea events.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown