JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.226.126.21

64.226.126.21 was found in our database!

This IP was reported 142 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.226.126.21

Whois 64.226.126.21

IP Abuse Reports for 64.226.126.21:

This IP address has been reported a total of 142 times from 93 distinct sources. 64.226.126.21 was first reported on October 18th 2023, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 SYSMarshal	2025-12-22 17:55:27 (8 months ago)	SysMarshal detection : RDP Brute-Force	DDoS Attack Brute-Force
🇺🇸 MPL	2025-12-22 10:52:23 (8 months ago)	tcp/443 (8 or more attempts)	Port Scan
🇺🇸 MPL	2025-12-22 06:38:18 (8 months ago)	tcp/443 (2 or more attempts)	Port Scan
🇺🇸 kosada.com	2025-12-22 06:05:05 (8 months ago)	Web shell injection: u0070x5cx5cu0072x5cx5cu006fx5cx5cu0063x5cx5cu0065x5cx5cu0073x5cx5cu0073[String. ... show more Web shell injection: u0070x5cx5cu0072x5cx5cu006fx5cx5cu0063x5cx5cu0065x5cx5cu0073x5cx5cu0073[String.fromCharCode(109,97,105,110,77,111,100,117,108,101)] show less	Web App Attack
🇨🇦 1gz	2025-12-22 06:04:49 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (POST ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Python/3.14 aiohttp/3.13.2 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 kranem	2025-12-22 03:00:47 (8 months ago)	Triggered Cloudflare WAF from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1 ... show more Triggered Cloudflare WAF from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1.1 (POST method) Endpoint: / Timestamp: 2025-12-21T16:59:10Z User-Agent: Python/3.14 aiohttp/3.13.2 show less	Bad Web Bot
🇵🇱 sefinek.net	2025-12-22 02:58:43 (8 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Python/3.14 aiohttp/3.13.2 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 [email protected]	2025-12-22 01:03:17 (8 months ago)	...	Brute-Force SSH
🇪🇸 el-brujo	2025-12-22 00:18:05 (8 months ago)	22/Dec/2025:01:18:04.412761 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 22/Dec/2025:01:18:04.412761 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 64.226.126.21] ModSecurity: Warning. Pattern match "(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|\\\\\\\\$\\\\\\\$\|\\\\\\\\$\\\\\\\\(\\\\\\\\(\|`\|\\\\\\\\${\|<\\\\\\\\(\|>\\\\\\\\(\|\\\\\\\\(\\\\\\\\s\\\\\\\$)\\\\\\\\s(?:{\|\\\\\\\\s\\\\\\\$\\\\\\\\s\|\\\\\\\\w+=(?:[^\\\\\\\\s]\|\\\\\\\\$.\|\\\\\\\\$.\|<.\|>.\|\\\\\\\\'.\\\\\\\\'\|\\\\".\\\\")\\\\\\\\s+\|!\\\\\\\\s\|\\\\\\\\$)\\\\\\\\s(?:'\|\\\\")(?:[\\\\\\\\?\\\\\\\\\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\$\\\\\\\\-\\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"](?:s[\\\\\\\\\\\\\\\\'\\\\"] ..." at ARGS:0. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "159"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\\\x22then\\\\x22: \\\\x22$1:__proto__:then\\\\x22, ... show less	Hacking Web App Attack
🇫🇷 GoodOldTOS	2025-12-21 20:02:11 (8 months ago)	Highly suspect IP	Hacking Web App Attack
🇪🇸 masterguru	2025-12-21 16:43:11 (8 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "aiohttp" at REQUEST_HEADERS:User-Agent. (1100000-12 ... show more BAD BOT - Detected and Blocked.. Matched phrase "aiohttp" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇩🇪 kranem	2025-12-21 12:00:17 (8 months ago)	Triggered Cloudflare WAF from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1 ... show more Triggered Cloudflare WAF from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/1.1 (POST method) Endpoint: / Timestamp: 2025-12-21T09:23:10Z User-Agent: Python/3.14 aiohttp/3.13.2 show less	Bad Web Bot
Anonymous	2025-12-21 11:55:14 (8 months ago)	SuspiciousC2 Activity detected by FMBAD System 2025-12-21 14:55:14	Hacking Bad Web Bot Web App Attack
🇫🇮 Jordy	2025-12-21 11:43:55 (8 months ago)	21/Dec/2025:12:46:08.901516 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 21/Dec/2025:12:46:08.901516 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.226.126.21] ModSecurity: Warning. Pattern match "(?:;\|\\\\\\\\{\|\\\\\\\\\|\|\\\\\\\\\|\\\\\\\\\|\|&\|&&\|\\\\\\\\n\|\\\\\\\\r\|\\\\\\\\$\\\\\\\$\|\\\\\\\\$\\\\\\\\(\\\\\\\\(\|`\|\\\\\\\\${\|<\\\\\\\\(\|>\\\\\\\\(\|\\\\\\\\(\\\\\\\\s\\\\\\\$)\\\\\\\\s(?:{\|\\\\\\\\s\\\\\\\$\\\\\\\\s\|\\\\\\\\w+=(?:[^\\\\\\\\s]\|\\\\\\\\$.\|\\\\\\\\$.\|<.\|>.\|\\\\\\\\'.\\\\\\\\'\|\\\\".\\\\")\\\\\\\\s+\|!\\\\\\\\s\|\\\\\\\\$)\\\\\\\\s(?:'\|\\\\")(?:[\\\\\\\\?\\\\\\\\\\\\\\\\[\\\\\\\\]\\\\\\\\(\\\\\\\$\\\\\\\\-\\\\\\\\\|+\\\\\\\\w'\\\\"\\\\\\\\./\\\\\\\\\\\\\\\\]+/)?[\\\\\\\\\\\\\\\\'\\\\"](?:s[\\\\\\\\\\\\\\\\'\\\\"] ..." at ARGS:0. [file "/usr/share/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "159"] [id "932105"] [msg "Remote Command Execution: Unix Command Injection"] [data "Matched Data: {'timeout found within ARGS:0: {\\\\x22then\\\\x22: \\\\x22$1:__proto__:then\\\\x22, \\\\x22 ... show less	Web App Attack
🇫🇷 mrcrassi	2025-12-21 09:00:43 (8 months ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST met ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: / UA: Python/3.14 aiohttp/3.13.2 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 142 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 159.65.2.17

🇧🇷 137.131.232.50

🇺🇸 91.230.168.88

🇫🇷 85.217.140.39

🇺🇸 70.170.130.37

🇩🇪 69.5.169.167

🇸🇬 47.128.61.18

🇲🇽 45.189.150.210

🇹🇼 35.185.163.89

🇧🇬 193.24.211.204

🇺🇸 192.126.224.240

🇧🇷 186.251.165.67

🇺🇦 185.228.105.247

🇳🇱 185.223.235.23

🇧🇷 177.214.176.7

🇺🇸 162.81.54.106

🇷🇺 95.25.159.123

🇫🇷 85.217.140.36

🇺🇸 75.177.160.129

🇺🇸 75.143.44.233