64.226.115.100

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
31% Elevated
19 reports
16 reporters · latest 9 hours ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
19 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇨🇿 Czechia 2 🇫🇷 France 2 🇩🇪 Germany 1
Most common categories Port Scan 5 Brute-Force 1 SSH 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Stara
Port scan detected - multiple connection attempts to various ports
Port Scan Brute-Force SSH
🇨🇿 lp
anomaly: udp_src_session, 2201 > threshold 2200, repeats 1127 times
Port Scan
🇫🇷 uthul
T-Pot honeypot: 12 hits on ports [2126, 2152, 2302, 2427, 2638, 2967, 3123, 3283, 3391, 3483] (automated)
Port Scan
🇩🇪 mueller-nils.com
Nov 7 06:02:59 [host] kernel: [1319615.007617] [UFW BLOCK] IN=venet0 OUT= MAC= SRC=64.226.115.100 DST=[munged] LEN=46 TOS=0x00 PREC=0x00 TTL=52 ID=51717 DF PROTO=UDP SPT=54882 DPT=47808 LEN=26 Nov 7 06:03:01 [host] kernel: [1319616.981703] [UFW BLOCK
Port Scan
🇨🇿 lp
anomaly: udp_src_session, 2201 > threshold 2200, repeats 341 times
Port Scan
🇺🇸 MPL
tcp/8088 (3 or more attempts)
Port Scan
Anonymous
Infected user bad webscan
Exploited Host
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent. Ip 64.226.115.100 performed 'crowdsecurity/http-bad-user-agent' (2 events over 2.018070298s) at 2025-10-29 01:47:38.36794127 +0000 UTC
Bad Web Bot Web App Attack
🇺🇸 mnsf
Too many Status 40X (20)
Brute-Force Web App Attack
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. Ip 64.226.115.100 performed 'crowdsecurity/http-probing' (11 events over 4.153667547s) at 2025-10-28 21:46:17.620060212 +0000 UTC
Hacking Web App Attack
Anonymous
suspicious behavior
Brute-Force Web App Attack
🇮🇩 sockominfo
[WAZUH] Potential webshell scan access detected - Suspicious filename pattern
Hacking Web App Attack
🇧🇪 cmbplf
318 requests with url.path *.alfa
Brute-Force Bad Web Bot
🇮🇩 BPS-StatisticsIndonesia
WP Admin Scan Activities
Web App Attack
🇮🇩 Burayot
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 64.226.115.100 (DE/Germany/-): 1 in the last 3600 secs
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 185.241.208.157
🇸🇬 85.203.21.48
🇲🇩 85.121.176.200
🇺🇸 66.132.159.66
🇳🇱 45.148.10.141
🇺🇸 205.210.31.82
🇳🇱 200.138.46.6
🇲🇩 193.107.99.7
🇺🇸 147.185.132.156
🇷🇴 80.94.92.234
🇺🇸 54.224.26.159
🇺🇸 50.6.207.102
🇺🇸 162.216.149.47
🇹🇼 111.70.3.156
🇧🇩 103.161.9.254
🇺🇸 66.132.186.213
feedback