JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

64.226.69.140

Neutral Activity

Abuse Confidence Score

0% Low Risk

187 reports

74 reporters · latest 7 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

64.226.69.140 has been reported 187 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

187 from 74 distinct reporters

First reported

March 5th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-04-06 06:41:46 UTC · (7 months ago)	[AUTORAVALT][[06/04/2026 - 03:41:46 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unaut ... show more [AUTORAVALT][[06/04/2026 - 03:41:46 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-04-04 19:01:44 UTC · (7 months ago)	[AUTORAVALT][[04/04/2026 - 16:01:44 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unaut ... show more [AUTORAVALT][[04/04/2026 - 16:01:44 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-03-30 06:43:06 UTC · (7 months ago)	[AUTORAVALT][[30/03/2026 - 03:43:06 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unaut ... show more [AUTORAVALT][[30/03/2026 - 03:43:06 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-03-23 06:43:57 UTC · (7 months ago)	[AUTORAVALT][[23/03/2026 - 03:43:56 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unaut ... show more [AUTORAVALT][[23/03/2026 - 03:43:56 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-03-21 15:55:06 UTC · (7 months ago)	[AUTORAVALT][[21/03/2026 - 12:55:06 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unaut ... show more [AUTORAVALT][[21/03/2026 - 12:55:06 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇺🇸 chronos	2026-03-16 06:49:37 UTC · (7 months ago)	[AUTORAVALT][[16/03/2026 - 03:49:36 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unaut ... show more [AUTORAVALT][[16/03/2026 - 03:49:36 -03:00 UTC] Attack from [DigitalOcean, LLC] [64.226.69.140] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇹🇷 rtbh.com.tr	2026-03-14 20:12:03 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇺 brocococonut	2026-03-14 13:00:47 UTC · (8 months ago)	Mar 8 00:10:41 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=64.226.69.140, lip=67.219.110.53, session=<z35n5W5MfN1A4kWM> Mar 8 00:27:40 01 dove ... show more Mar 8 00:10:41 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=64.226.69.140, lip=67.219.110.53, session=<z35n5W5MfN1A4kWM> Mar 8 00:27:40 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=64.226.69.140, lip=67.219.110.53, session=<H+IoIm9M9M1A4kWM> Mar 8 00:45:01 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=64.226.69.140, lip=67.219.110.53, session=<8Zg1YG9MNr1A4kWM> Mar 8 01:02:14 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=64.226.69.140, lip=67.219.110.53, session=<8xXEnW9MfqhA4kWM> Mar 8 01:19:52 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts ... show less	Brute-Force
🇹🇭 Sawasdee	2026-03-13 15:47:07 UTC · (8 months ago)	Port Scan ...	Port Scan
🇸🇬 celestialcity	2026-03-13 08:57:17 UTC · (8 months ago)	Blocked by UFW on celestialcityas [4088/tcp] \| SPT: 50992 \| TTL: 233 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇹🇼 kk_it_man	2026-03-13 08:51:17 UTC · (8 months ago)		Hacking
🇭🇰 PingMeMaybe	2026-03-13 08:42:23 UTC · (8 months ago)	Blocked by UFW on hk [4088/tcp] Source port: 50992 TTL: 243 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-03-13 08:31:22 UTC · (8 months ago)	Honeypot hit: SSH handshake/banner (17 bytes of payload); 37837 [1] TCP	Brute-Force SSH
🇬🇧 gbzret4d	2026-03-13 02:52:34 UTC · (8 months ago)	Honeypot [uk-production01]: SSH handshake/banner (17 bytes of payload); 36816 [1] TCP	SSH
🇹🇷 0xi	2026-03-13 02:15:34 UTC · (8 months ago)	Malicious scanning and attack activity detected (36 attempts). Targeted ports: 36816. Triggered sensors: P0f, Suricata. Observed via distributed honeypot network.	Port Scan

Showing 1 to 15 of 187 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.150.153

🇫🇷 82.102.18.222

🇸🇪 78.66.45.101

🇸🇬 68.178.164.156

🇩🇪 194.88.98.116

🇨🇭 173.239.216.29

🇬🇧 87.106.65.126

🇺🇸 75.90.182.124

🇺🇸 72.215.46.200

🇺🇸 72.214.50.14

🇲🇰 31.11.112.89

🇩🇪 207.154.243.21

🇬🇹 181.79.170.79

🇺🇸 170.168.175.227

🇧🇷 168.90.200.223

🇧🇩 103.77.253.130

🇷🇺 91.144.158.231

🇺🇸 73.104.235.84

🇺🇸 72.211.57.163

🇺🇸 72.205.174.53