JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.225.66.214

64.225.66.214 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 53%: ?

53%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.225.66.214

Whois 64.225.66.214

IP Abuse Reports for 64.225.66.214:

This IP address has been reported a total of 23 times from 16 distinct sources. 64.225.66.214 was first reported on February 23rd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-09-16 22:22:54 (2 days ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-09-15 22:21:04 (3 days ago)		Brute-Force Web App Attack
🇨🇾 maxdcy	2026-09-15 08:00:25 (4 days ago)	Blocked by IPFire firewall/IPS: 3 packets dropped on Sep 15 — matched IPFire IPS (Suricata / Emergin ... show more Blocked by IPFire firewall/IPS: 3 packets dropped on Sep 15 — matched IPFire IPS (Suricata / Emerging Threats) drop rules. Origin: AS14061 - DigitalOcean, LLC. show less	Port Scan Hacking
🇧🇷 noconex	2026-09-15 05:59:07 (4 days ago)	Wazuh Alert \| Rule ID: 110100 \| Desc: Suricata: Exploit (ET WEB_SERVER Possible SQL Injection UNION ... show more Wazuh Alert \| Rule ID: 110100 \| Desc: Suricata: Exploit (ET WEB_SERVER Possible SQL Injection UNION SELECT in HTTP Request Body) 64.225.66.214 show less	Port Scan Brute-Force SSH
🇩🇪 yitzhaq	2026-09-15 02:58:52 (4 days ago)	64.225.66.214 - - [15/Sep/2026:04:06:35 +0200] "POST /wp-login.php HTTP/1.1" 200 19727 "-" "Mozilla/ ... show more 64.225.66.214 - - [15/Sep/2026:04:06:35 +0200] "POST /wp-login.php HTTP/1.1" 200 19727 "-" "Mozilla/5.0" 64.225.66.214 - - [15/Sep/2026:04:17:49 +0200] "POST /wp-login.php HTTP/1.1" 200 19727 "-" "Mozilla/5.0" 64.225.66.214 - - [15/Sep/2026:04:31:08 +0200] "POST /wp-login.php HTTP/1.1" 200 19726 "-" "Mozilla/5.0" 64.225.66.214 - - [15/Sep/2026:04:44:58 +0200] "POST /wp-login.php HTTP/1.1" 200 19726 "-" "Mozilla/5.0" 64.225.66.214 - - [15/Sep/2026:04:58:49 +0200] "POST /wp-login.php HTTP/1.1" 200 19728 "-" "Mozilla/5.0" 64.225.66.214 - - [15/Sep/2026:02:54:15 +0200] "GET /wp-login.php HTTP/1.1" 301 590 "-" "Mozilla/5.0" 64.225.66.214 - - [15/Sep/2026:02:54:15 +0200] "GET /wp-login.php HTTP/1.1" 200 10058 "-" "Mozilla/5.0" 64.225.66.214 - - [15/Sep/2026:02:54:16 +0200] "GET /?author=1 HTTP/1.1" 301 616 "-" "Mozilla/5.0" 64.225.66.214 - - [15/Sep/2026:02:54:16 +0200] "GET /?feed=rss2 HTTP/1.1" 301 719 "-" "Mozilla/5.0" 64.225.66.214 - - [15/Sep/2026:02:54:16 +0200] "GET /feed/ HTTP/1.1" 2 show less	Web App Attack Brute-Force
🇫🇷 masterguru	2026-09-15 02:51:11 (4 days ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-197)	Hacking
Anonymous	2026-09-15 02:15:36 (4 days ago)	Web attack blocked by Wordfence on beeldentuinrolduc.nl (1 hit). Reported by CRMON.	Web App Attack
🇹🇼 ip4.tw	2026-09-15 01:02:01 (4 days ago)	Malicious web scan	Hacking Web App Attack
🇺🇸 kosada.com	2026-09-15 00:54:04 (4 days ago)	Repeated requests for suspicious nonexistent URLs, for example: /wp-json/batch/v1 (HTTP/1.1 port 443 ... show more Repeated requests for suspicious nonexistent URLs, for example: /wp-json/batch/v1 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36") show less	Web App Attack
🇵🇱 Budyn	2026-09-15 00:44:34 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.tech \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-08-14 07:41:41 (1 month ago)	Aggressive web search of vulnerable pages: /themes/.env /themes/_profiler/ /themes/classic-rocket/.e ... show more Aggressive web search of vulnerable pages: /themes/.env /themes/_profiler/ /themes/classic-rocket/.env /themes/classic-rocket/_profiler/ /theme ... show less	Web App Attack
🇺🇸 MPL	2026-04-15 01:58:35 (5 months ago)	tcp/8081	Port Scan
🇺🇸 MPL	2026-04-15 00:59:58 (5 months ago)	tcp/8080	Port Scan
🇺🇸 MPL	2026-04-15 00:59:58 (5 months ago)	tcp ports: 8080,8081 (3 or more attempts)	Port Scan
🇯🇵 jay hung	2026-04-15 00:55:22 (5 months ago)	2026-04-15T00:55:15.760298+00:00 quarktech kernel: [2292787.306313] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-04-15T00:55:15.760298+00:00 quarktech kernel: [2292787.306313] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=64.225.66.214 DST=172.237.29.33 LEN=44 TOS=0x00 PREC=0x40 TTL=233 ID=501 PROTO=TCP SPT=61006 DPT=8000 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 95.105.52.153

🇳🇱 206.223.236.107

🇧🇪 91.86.92.45

🇺🇿 87.192.237.212

🇬🇧 81.137.231.219

🇹🇼 61.29.249.66

🇳🇱 45.142.193.164

🇺🇸 17.166.150.148

🇹🇼 198.235.24.92

🇧🇷 191.251.10.82

🇺🇸 154.222.97.155

🇰🇷 121.184.144.232

🇮🇩 103.139.126.5

🇺🇸 72.225.141.225

🇺🇸 70.184.172.229

🇬🇧 45.133.173.105

🇮🇩 36.93.154.207

🇺🇸 17.166.24.138

🇬🇧 213.166.84.53

🇧🇷 177.66.185.122