This IP address has been reported a total of
200
times from
155 distinct
sources.
64.227.126.240 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 8084
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_ ...
show moreHoneypot [fra-de-honeypot]: HTTP/1.1 request on 8084
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate; 8084 [2] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Blocked by UFW [5918/tcp]
Source port: 61005
TTL: 239
Packet length: 44
TOS: 0x00
This report was g ...
show moreBlocked by UFW [5918/tcp]
Source port: 61005
TTL: 239
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10 ...
show more[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10m window.
Origin: DE / AS14061 DigitalOcean, LLC
Active: 07:32:30 UTC
Volume: 1 HTTP req
Probed: /
Status mix: 444×1
Vhost fishing: 67.217.240.72
UA: "Opera/9.95.(Windows NT 5.1; om-KE) Presto/2.9.183 Version/12.00"
Auto-banned 30d. zorvexus-banner.
show less
Enumerating paths that do not exist (scanning) | method: POST | path: /wp-admin/admin-ajax.php | ua: ...
show moreEnumerating paths that do not exist (scanning) | method: POST | path: /wp-admin/admin-ajax.php | ua: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.0; Trident/4.1) | 2026-08-29 16:31 UTC
show less
Triggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST met ...
show moreTriggered Cloudflare WAF (firewallManaged) from DE.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /admin/pub/markup
UA: Opera/9.47.(Windows NT 6.0; sc-IT) Presto/2.9.180 Version/12.00
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
Blocked by UFW [9443/tcp] | SPT: 53914 | TTL: 56 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sef ...
show moreBlocked by UFW [9443/tcp] | SPT: 53914 | TTL: 56 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(mod_security) mod_security (id:9999001) triggered by 64.227.126.240 (DE/Germany/Hesse/Frankfurt am ...
show more(mod_security) mod_security (id:9999001) triggered by 64.227.126.240 (DE/Germany/Hesse/Frankfurt am Main/-/[AS14061 DIGITALOCEAN-ASN]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Aug 27 04:36:27.874829 2026] [security2:error] [pid 1783136:tid 1783270] [client 64.227.126.240:65052] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^154\\\\.57\\\\.7\\\\.73$" at REQUEST_HEADERS:Host. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "155"] [id "9999001"] [msg "Direct incoming request to server shared IP blocked by admin"] [hostname "154.57.7.73"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ao-Um6wJ3qwwCVFKAt3RqwAAAUQ"]
show less