64.227.36.104

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
56% Elevated
29 reports
28 reporters · latest 3 weeks ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇬🇧 United Kingdom of Great Britain and Northern Ireland
City
London, England
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
29 from 28 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇳🇱 Netherlands 4 🇨🇦 Canada 3 🇵🇱 Poland 3
Most common categories Port Scan 21 Hacking 6 Brute-Force 3 Exploited Host 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇺🇸 xmission.com
Blocked by UFW (TCP on 3389) Source port: 53118 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 64.227.36.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇷🇸 Smel
Unauthorized Probe/Connection, Hack -
Port Scan Hacking
🇫🇷 Coco Bongo
1791884250 - 10/13/2026 11:37:30 Host: 64.227.36.104/64.227.36.104 Port: 3389 TCP Blocked ...
Port Scan
🇮🇳 Mr.Singh
NFT blocked 64.227.36.104 on 13-Oct-2026..
Port Scan Brute-Force
🇨🇦 Slackin' Jack
Triggered honeypot on port 3389. (64.227.36.104)
Port Scan
Anonymous
Trying ports that it shouldn't be.
Port Scan Hacking Exploited Host
🇨🇿 lp
anomaly: tcp_port_scan, 501 > threshold 500, repeats 22456 times
Port Scan
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=3389 | HITS=2 | IPSET=ADD | FIRST=2026-10-13 09:20:44 | LAST=2026-10-13 09:20:44. Last seen 2026-10-13 09:20:44.
Port Scan
🇩🇪 zupan
Blocked by UFW on vps [3389/tcp] | SPT: 41738 | TTL: 52 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇪🇸 whatda
RDP connection attempt for user "CGrab/v8.24.1-dev-throughput"
Hacking Port Scan
🇵🇱 bart@
Port Scan
Anonymous
Drop from IP address 64.227.36.104 to tcp-port 3389
Port Scan
🇨🇦 Blinker73
Port Scan
🇳🇱 VMHeaven.io
Blocked by UFW [3389/tcp] Source port: 51584 TTL: 57 Packet length: 60
Port Scan Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.32.162.218
🇺🇸 98.174.45.123
🇺🇸 20.64.97.98
🇺🇸 192.190.221.7
🇨🇳 175.153.221.109
🇺🇸 172.96.182.111
🇨🇳 124.88.174.143
🇺🇸 98.89.3.48
🇲🇩 94.176.79.147
🇺🇸 66.132.224.80
🇨🇳 61.155.167.61
🇨🇱 190.160.85.143
🇦🇷 181.13.210.250
🇺🇸 152.163.101.138
🇺🇸 45.79.109.236
🇺🇸 20.38.15.21
🇨🇳 223.83.131.241
🇳🇱 200.138.46.113
🇹🇳 196.203.231.220
🇮🇶 169.224.99.70
feedback