64.227.112.13

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
100% Critical
35 reports
28 reporters · latest 1 week ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
35 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 9 🇩🇪 Germany 6 🇧🇷 Brazil 2
Most common categories Port Scan 28 Hacking 7 Email Spam 1 Exploited Host 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 _ArminS_
SP-Scan 38568:1723 detected 2026.11.06 16:20:35 blocked until 2026.12.26 09:23:22
Port Scan
🇧🇷 Host One
T-Pot Honeypot alert: 1 malicious events (exploit_attempt) detected.
Hacking
🇺🇸 sandra361
Port scan detected: 7 packets across 1 port (1723). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=64.227.112.13 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=31639 DF PROTO=TCP SPT=35744 DPT=1723 WINDOW=64240 RES=0x00 ACK FIN URGP=0
Port Scan
🇩🇪 D3RP4UL
Unauthorized traffic on 1723/pptpd
Port Scan
🇫🇮 dnsbd.tech
nftables: Port scan (TCP:1723) [srv2]
Port Scan Hacking
🇳🇱 StopAbuse
tcp/1723
Port Scan
🇪🇸 el-brujo
T-Pot Honeypot (Honeytrap): Automated attack on port 1723/PPTP
Port Scan Hacking
🇵🇱 nfsec.pl
Detected: TCP scan on port: 1723 with flags: SYN
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: Unauthorized pptpd/tcp traffic (dst port 1723, src port 48352) against a passive decoy service with no legitimate function, consistent with automated scanning.
Port Scan
🇧🇷 somosbr
[2026-11-06T11:59:20Z] Unsolicited scan from 64.227.112.13 to port 1723/tcp
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/1723 (PPTP); 3 application-level events across 3 source port(s). Sensor(s): Dionaea.
Port Scan
🇬🇧 essinghigh
IPS Detection: 64.227.112.13 -> DPT: 1723
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 1723
Port Scan Hacking Exploited Host
🇳🇵 radheykrishna.com.np
Nov 6 13:18:43 kernel: [2855642.261893] [UFW BLOCK] IN=ens160 OUT= SRC=64.227.112.13 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=63257 DPT=1723 WINDOW=65535 RES=0x00 SYN URGP=0 ...
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 1723) Source port: 65430 TTL: 237 Packet length: 40 TOS: 0x00 This report (for 64.227.112.13) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇹 196.189.154.54
🇧🇬 78.128.112.6
🇬🇧 31.14.254.50
🇬🇧 31.14.254.7
🇮🇶 130.193.199.225
🇺🇸 85.239.244.94
🇺🇸 69.6.242.13
🇨🇳 60.172.1.210
🇵🇱 45.138.12.25
🇺🇸 35.221.33.17
🇹🇼 198.235.24.120
🇬🇧 195.140.214.21
🇩🇪 109.160.32.47
🇺🇸 66.132.159.69
🇳🇱 45.148.10.164
🇺🇸 34.56.73.219
feedback