JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.227.104.105

64.227.104.105 was found in our database!

This IP was reported 172 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.227.104.105

Whois 64.227.104.105

IP Abuse Reports for 64.227.104.105:

This IP address has been reported a total of 172 times from 103 distinct sources. 64.227.104.105 was first reported on August 15th 2024, and the most recent report was 15 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Nerdscave Hosting	2026-07-01 18:42:45 (15 minutes ago)	Apache web server attack detected by Fail2Ban in plesk-apache jail	Web App Attack
🇺🇸 zwebvigil	2026-07-01 18:00:55 (56 minutes ago)	64.227.104.105 [01/Jul/2026:11:00:54 -0700] "GET /.env.test HTTP/1.1" 404 196 "-" port=56036 "Mozil ... show more 64.227.104.105 [01/Jul/2026:11:00:54 -0700] "GET /.env.test HTTP/1.1" 404 196 "-" port=56036 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" "-" "-" "sip.<host>" 209 64.227.104.105 [01/Jul/2026:11:00:54 -0700] "GET /.env.staging HTTP/1.1" 404 196 "-" port=56036 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" "-" "-" "sip.<host>" 317 64.227.104.105 [01/Jul/2026:11:00:54 -0700] "GET /.env.backup HTTP/1.1" 404 196 "-" port=56036 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" "-" "-" "sip.<host>" 414 64.227.104.105 [01/Jul/2026:11:00:54 -0700] "GET /.env.save HTTP/1.1" 404 196 "-" port=56036 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" " show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-01 17:29:20 (1 hour ago)	64.227.104.105 - - [01/Jul/2026:20:29:18 +0300] "GET /web/.env HTTP/1.1" 404 4709 "-" "Mozilla/5.0 ( ... show more 64.227.104.105 - - [01/Jul/2026:20:29:18 +0300] "GET /web/.env HTTP/1.1" 404 4709 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 64.227.104.105 - - [01/Jul/2026:20:29:19 +0300] "GET /public/.env HTTP/1.1" 404 738 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" ... show less	Web App Attack
🇩🇪 todix	2026-07-01 16:53:11 (2 hours ago)	WebAttack or semilar from 64.227.104.105	Web App Attack
Anonymous	2026-07-01 16:45:42 (2 hours ago)	64.227.104.105 - - [01/Jul/2026:16:45:40 +0000] "GET /.env HTTP/1.1" 404 15295 "-" "Mozilla/5.0 (Win ... show more 64.227.104.105 - - [01/Jul/2026:16:45:40 +0000] "GET /.env HTTP/1.1" 404 15295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" "-" 64.227.104.105 - - [01/Jul/2026:16:45:41 +0000] "GET /.env.local HTTP/1.1" 404 15307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" "-" 64.227.104.105 - - [01/Jul/2026:16:45:41 +0000] "GET /.env.production HTTP/1.1" 404 15317 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" "-" 64.227.104.105 - - [01/Jul/2026:16:45:41 +0000] "GET /.env.development HTTP/1.1" 404 15319 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" "-" 64.227.104.105 - - [01/Jul/2026:16:45:41 +0000] "GET /.env.dev HTTP/1.1" 404 15303 "-" "Mozilla/5.0 (Windows NT ... show less	Port Scan Brute-Force
Anonymous	2026-07-01 16:10:38 (2 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇳🇱 e.fierstra	2026-07-01 16:05:12 (2 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-07-01 16:04:52 (2 hours ago)	6 hits, proto=tcp, ports=443	Port Scan Hacking
🇳🇱 wlt-blocker	2026-07-01 15:32:11 (3 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 iNetWorker	2026-07-01 15:11:41 (3 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 SCHAPPY	2026-07-01 15:01:07 (3 hours ago)	Malicious activity from IP detected: crowdsecurity/http-sensitive-files.	Web App Attack Hacking
Anonymous	2026-07-01 14:53:13 (4 hours ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
Anonymous	2026-07-01 14:47:44 (4 hours ago)	64.227.104.105 - - [01/Jul/2026:22:47:43 +0800] "GET /.env.save HTTP/1.1" 404 196 "-" "Mozilla/5.0 ( ... show more 64.227.104.105 - - [01/Jul/2026:22:47:43 +0800] "GET /.env.save HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-01 14:34:41 (4 hours ago)	64.227.104.105 - - [01/Jul/2026:16:34:29 +0200] "GET /config HTTP/1.1" 404 446 "-" "Mozilla/5.0 (Win ... show more 64.227.104.105 - - [01/Jul/2026:16:34:29 +0200] "GET /config HTTP/1.1" 404 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 64.227.104.105 - - [01/Jul/2026:16:34:29 +0200] "GET /config HTTP/1.1" 404 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 64.227.104.105 - - [01/Jul/2026:16:34:30 +0200] "GET /.env HTTP/1.1" 404 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 64.227.104.105 - - [01/Jul/2026:16:34:30 +0200] "GET /.env HTTP/1.1" 404 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 64.227.104.105 - - [01/Jul/2026:16:34:32 +0200] "GET /.env.local HTTP/1.1" 404 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik ... show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-01 14:13:50 (4 hours ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack

Showing 1 to 15 of 172 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2620:109:c003:104::226

🇭🇰 45.142.154.87

🇺🇸 43.135.134.127

🇺🇸 20.163.14.102

🇳🇱 20.160.86.7

🇬🇧 2a00:1450:4009:c19::125

🇳🇱 176.65.148.158

🇵🇱 176.53.159.198

🇮🇩 103.175.189.116

🇮🇳 103.38.182.49

🇭🇰 101.36.107.243

🇳🇱 91.92.40.12

🇵🇱 87.251.64.156

🇺🇸 74.125.179.90

🇲🇾 49.124.151.63

🇵🇰 37.111.189.5

🇬🇧 2a00:1450:4009:c19::120

🇰🇷 211.46.177.174

🇪🇨 205.235.2.176

🇳🇬 152.32.140.22