JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

64.225.3.166

Neutral Activity

Abuse Confidence Score

0% Low Risk

124 reports

52 reporters · latest 4 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

64.225.3.166 has been reported 124 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

124 from 52 distinct reporters

First reported

January 13th 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-17 15:09:11 UTC · (4 months ago)	ICS Labs identified 64.225.3.166 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
Anonymous	2026-04-29 13:03:58 UTC · (6 months ago)	2026-04-29T15:03:46.875377+02:00 vm635618.cloud.nuxt.network sshd-session[1878]: Failed password for root from 64.225.3.166 port 38546 ssh2 2026-04-29T15:03:55.936404+02:00 vm635618.cloud.nuxt.network sshd-session[1881]: pam_unix(sshd:auth): authenti ... show more 2026-04-29T15:03:46.875377+02:00 vm635618.cloud.nuxt.network sshd-session[1878]: Failed password for root from 64.225.3.166 port 38546 ssh2 2026-04-29T15:03:55.936404+02:00 vm635618.cloud.nuxt.network sshd-session[1881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.3.166 user=root 2026-04-29T15:03:57.885823+02:00 vm635618.cloud.nuxt.network sshd-session[1881]: Failed password for root from 64.225.3.166 port 41294 ssh2 ... show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-04-29 08:56:24 UTC · (6 months ago)	This IP address carried out 82 SSH credential attack (attempts) on 28-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
🇦🇺 trentwiles.com	2026-04-29 02:09:24 UTC · (6 months ago)	Unauthorized connection attempt detected from IP address 64.225.3.166 to port 10002 [SYD]	Port Scan
🇵🇱 axiomofchoice.xyz	2026-04-28 19:43:11 UTC · (6 months ago)	endlessh trap: attempts=1 total_time_stuck=20.027s	Port Scan SSH Hacking
🇵🇱 axiomofchoice.xyz	2026-04-28 19:43:11 UTC · (6 months ago)	endlessh trap: attempts=1 total_time_stuck=20.027s	Port Scan SSH Hacking
🇺🇸 bigscoots.com	2026-04-28 16:22:18 UTC · (6 months ago)	64.225.3.166 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 28 11:22:12 9835 sshd[30827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 64.225.3.166 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 28 11:22:12 9835 sshd[30827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.3.166 user=root Apr 28 10:40:56 9835 sshd[24747]: Failed password for root from 46.29.234.127 port 34958 ssh2 Apr 28 11:21:54 9835 sshd[30821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.3.166 user=root Apr 28 11:21:56 9835 sshd[30821]: Failed password for root from 64.225.3.166 port 37342 ssh2 Apr 28 10:40:54 9835 sshd[24747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.29.234.127 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇯🇵 bluecloudwork	2026-04-28 09:14:00 UTC · (6 months ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇩🇪 NetWatch	2026-04-27 07:36:39 UTC · (6 months ago)	The IP 64.225.3.166 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇭🇰 bluecloudwork	2026-04-26 23:41:44 UTC · (6 months ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇺🇸 trentwiles.com	2026-04-26 21:07:48 UTC · (6 months ago)	Unauthorized connection attempt detected from IP address 64.225.3.166 to port 2222 [SFO]	Port Scan
🇺🇸 bigscoots.com	2026-04-26 00:19:01 UTC · (6 months ago)	64.225.3.166 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 25 19:04:11 13308 sshd[1039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 64.225.3.166 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 25 19:04:11 13308 sshd[1039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.188.107 user=root Apr 25 19:04:13 13308 sshd[1039]: Failed password for root from 49.51.188.107 port 52664 ssh2 Apr 25 19:18:25 13308 sshd[5090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.3.166 user=root Apr 25 19:18:27 13308 sshd[5090]: Failed password for root from 64.225.3.166 port 55340 ssh2 Apr 25 19:18:38 13308 sshd[5105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.3.166 user=root IP Addresses Blocked: 49.51.188.107 (US/United States/-) show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-25 22:39:34 UTC · (6 months ago)	2026-04-25 16:41:26 ["uname -s -m"]	Brute-Force
🇺🇸 bigscoots.com	2026-04-25 20:28:38 UTC · (6 months ago)	64.225.3.166 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 25 15:28:22 21438 sshd[31484]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more 64.225.3.166 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 25 15:28:22 21438 sshd[31484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.3.166 user=root Apr 25 15:28:13 21438 sshd[31478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.3.166 user=root Apr 25 15:28:15 21438 sshd[31478]: Failed password for root from 64.225.3.166 port 45324 ssh2 Apr 25 15:04:31 21438 sshd[29606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.131.7.193 user=root Apr 25 15:04:33 21438 sshd[29606]: Failed password for root from 137.131.7.193 port 48412 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-25 05:50:10 UTC · (6 months ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 194.164.107.4

🇰🇷 175.210.10.97

🇮🇩 172.71.143.136

🇧🇷 172.68.223.131

🇺🇸 140.235.170.78

🇨🇳 124.236.72.39

🇩🇪 93.251.116.2

🇺🇸 72.69.145.212

🇺🇸 45.156.131.24

🇬🇧 31.14.254.73

🇳🇱 200.138.46.104

🇧🇷 187.85.95.99

🇵🇷 172.71.225.133

🇳🇬 172.69.12.182

🇧🇷 172.69.11.51

🇵🇭 162.158.228.212

🇸🇬 162.158.189.5

🇸🇬 161.120.177.205

🇻🇳 103.60.242.169

🇹🇷 88.230.180.159