JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.227.104.172

64.227.104.172 was found in our database!

This IP was reported 286 times. Confidence of Abuse is 25%: ?

25%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	7514d047-ef90-4c7e-a004-57757fc1f80b.fs.lucidlink.com
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.227.104.172

Whois 64.227.104.172

IP Abuse Reports for 64.227.104.172:

This IP address has been reported a total of 286 times from 99 distinct sources. 64.227.104.172 was first reported on September 17th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-06-20 07:01:54 (2 days ago)	2026-06-20T10:01:54.445696+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-20T10:01:54.445696+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=64.227.104.172 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=38066 PROTO=TCP SPT=61013 DPT=8081 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-06-20 06:42:31 (2 days ago)	tcp/443 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-06-20 06:39:29 (2 days ago)	Blocked by UFW (TCP on 8080) Source port: 61000 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8080) Source port: 61000 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 64.227.104.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇮🇳 Parth Maniar	2021-10-07 01:17:09 (4 years ago)	SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect ... show more SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout on @parthmaniar on Twitter. show less	Brute-Force SSH
🇺🇸 Dominik Wozniak	2021-10-06 07:47:56 (4 years ago)	Oct 6 11:42:10 ssh sshd[9773]: Failed password for root from 64.227.104.172 port 52962 ssh2 Oct 6 ... show more Oct 6 11:42:10 ssh sshd[9773]: Failed password for root from 64.227.104.172 port 52962 ssh2 Oct 6 11:47:55 ssh sshd[13384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.104.172 show less	Brute-Force SSH
🇺🇸 ShadowWhisperer	2021-10-06 07:35:51 (4 years ago)	Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2021-10-06T11:36:14Z and 2021-10-0 ... show more Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2021-10-06T11:36:14Z and 2021-10-06T11:36:15Z show less	Brute-Force SSH
🇩🇪 1000grad.com	2021-10-05 21:39:03 (4 years ago)	5x Failed Password	Brute-Force SSH
🇺🇸 amit177	2021-10-05 21:38:24 (4 years ago)		Brute-Force SSH
🇫🇷 LoginRoot	2021-10-05 21:20:09 (4 years ago)	Oct 6 03:20:08 sd-69548 sshd[1305666]: Invalid user admin from 64.227.104.172 port 55580 ...	Brute-Force SSH
🇦🇺 Ross Wheatley	2021-10-05 15:07:17 (4 years ago)	invalid user mahmood from 64.227.104.172 port 44980 ssh2	Brute-Force SSH
🇩🇪 netlynx.me	2021-10-05 12:08:00 (4 years ago)	64.227.104.172 triggered Icarus honeypot on port 22. Check us out on github.	Port Scan Hacking
🇰🇪 aorth	2021-10-05 11:59:37 (4 years ago)	Invalid user jmpark from 64.227.104.172 port 51214	Brute-Force SSH
🇩🇪 HoneyPotEu-Fr2	2021-10-05 07:27:21 (4 years ago)	Oct 5 13:27:19 f9d0fe6 sshd[19986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Oct 5 13:27:19 f9d0fe6 sshd[19986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.104.172 Oct 5 13:27:21 f9d0fe6 sshd[19986]: Failed password for invalid user jmpark from 64.227.104.172 port 41526 ssh2 ... show less	Brute-Force SSH
🇨🇦 KIsmay	2021-10-05 03:28:42 (4 years ago)	SSH Brute Force	Brute-Force SSH
🇩🇪 LarsLehmann	2021-10-05 02:28:18 (4 years ago)	Oct 5 08:22:47 mx03vp sshd[2279]: Failed password for root from 64.227.104.172 port 35586 ssh2 Oct ... show more Oct 5 08:22:47 mx03vp sshd[2279]: Failed password for root from 64.227.104.172 port 35586 ssh2 Oct 5 08:28:15 mx03vp sshd[3000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.104.172 Oct 5 08:28:17 mx03vp sshd[3000]: Failed password for invalid user pdr from 64.227.104.172 port 35634 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 286 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.221.76.68

🇹🇼 221.120.57.125

🇺🇸 216.180.246.209

🇺🇸 184.105.139.106

🇲🇾 180.73.165.90

🇹🇼 128.14.239.39

🇦🇺 45.134.20.71

🇺🇸 45.132.115.76

🇺🇸 20.55.29.197

🇮🇳 223.185.62.236

🇨🇳 111.26.163.43

🇮🇳 103.59.133.150

🇮🇷 78.39.48.166

🇺🇸 66.132.172.122

🇺🇸 52.21.227.35

🇮🇳 2405:201:c037:c03d:514d:829:4bcd:4b5d

🇩🇪 194.88.98.119

🇳🇱 185.223.235.30

🇺🇸 172.86.117.217

🇭🇰 121.202.146.144