JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.23.137.131

64.23.137.131 was found in our database!

This IP was reported 560 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.23.137.131

Whois 64.23.137.131

IP Abuse Reports for 64.23.137.131:

This IP address has been reported a total of 560 times from 157 distinct sources. 64.23.137.131 was first reported on August 21st 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-02 07:15:05 (1 month ago)	Blocked by UFW (TCP on 8888) Source port: 61007 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8888) Source port: 61007 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 64.23.137.131) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-05-07 19:13:56 (2 months ago)	tcp/18789 (2 or more attempts)	Port Scan
🇷🇸 Scan	2026-05-07 00:21:59 (2 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇬🇧 gbzret4d	2026-05-06 09:45:37 (2 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 8098 GET /stats User-Agent: Go-http-client/1.1 Acce ... show more Honeypot [uk-production01]: HTTP/1.1 request on 8098 GET /stats User-Agent: Go-http-client/1.1 Accept-Encoding: gzip; 8098 [12], 49049 [1], 15298 [1], 20040 [1], 3028 [1], 49673 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 johuang92	2026-05-05 10:09:15 (2 months ago)	Cowrie SSH honeypot: session 5dea7bf0a837	SSH
🇫🇮 ngonghillsbikers	2026-05-02 04:00:05 (2 months ago)	Date: 02/May/2026:06:38:12.851565 +0300 \| Reported IP: 64.23.137.131 mod_security \| id: 920350 95013 ... show more Date: 02/May/2026:06:38:12.851565 +0300 \| Reported IP: 64.23.137.131 mod_security \| id: 920350 950130 959100 980170 \| US/group.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; ; ; ; ; Warning. Pattern match; Warning. Pattern match; Warning. Unconditional match in SecAction. [file; Access denied with code 403 (phase 4). Operator GE matched 4 at TX:blocking_outbound_anomaly_score. [file show less	SQL Injection Brute-Force Bad Web Bot
🇫🇮 iamxorum	2026-04-30 04:21:04 (2 months ago)	2026-04-30T04:21:04.522656+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2: ... show more 2026-04-30T04:21:04.522656+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=64.23.137.131 DST=46.62.222.43 LEN=44 TOS=0x00 PREC=0x00 TTL=52 ID=50066 DF PROTO=TCP SPT=51322 DPT=23 WINDOW=65280 RES=0x00 SYN URGP=0 ... show less	Port Scan IoT Targeted
🇺🇸 technash	2026-04-29 07:07:40 (2 months ago)	Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped IP entity detected [Fortin ... show more Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel]. Deny/drop traffic. show less	Port Scan
🇬🇧 gbzret4d	2026-04-27 23:34:40 (2 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 11525 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 11525 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 11525 [1] TCP show less	Hacking Bad Web Bot
🇺🇸 ISPLtd	2026-04-26 14:21:39 (2 months ago)	Apr 26 11:19:54 64.23.137.131 TCP SPT=53192 DPT=513 SYN Apr 26 11:21:02 64.23.137.131 TCP SPT=53233 ... show more Apr 26 11:19:54 64.23.137.131 TCP SPT=53192 DPT=513 SYN Apr 26 11:21:02 64.23.137.131 TCP SPT=53233 DPT=7 SYN Apr 26 11:21:38 64.23.137.131 TCP SPT=53274 DPT=21 SYN ... show less	Port Scan
🇬🇧 gbzret4d	2026-04-26 13:40:40 (2 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 10973 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 10973 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 10973 [1] TCP show less	Hacking Bad Web Bot
🇫🇮 6kilowatti	2026-04-26 12:45:55 (2 months ago)	2026-04-26T15:45:53.618739+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-04-26T15:45:53.618739+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=64.23.137.131 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=232 ID=39318 PROTO=TCP SPT=47523 DPT=1110 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 2MP	2026-04-25 22:13:47 (2 months ago)	Honeypot [gcp-tpot]: HTTP/1.1 request on 4981 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64 ... show more Honeypot [gcp-tpot]: HTTP/1.1 request on 4981 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 4981 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇫🇮 nNordic	2026-04-25 08:43:50 (2 months ago)	Connection attempt blocked by IDS/IPS from 64.23.137.131/32	Hacking
🇬🇧 gbzret4d	2026-04-25 06:46:39 (2 months ago)	Honeypot [uk-production01]: HTTP/1.1 request on 10511 GET / User-Agent: Mozilla/5.0 (Windows NT 10. ... show more Honeypot [uk-production01]: HTTP/1.1 request on 10511 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 10511 [1] TCP show less	Hacking Bad Web Bot

Showing 1 to 15 of 560 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.46

🇺🇸 63.47.149.59

🇨🇳 218.86.29.224

🇳🇱 157.245.69.32

🇨🇦 85.217.149.74

🇺🇸 64.31.36.164

🇩🇪 47.245.138.189

🇺🇸 5.253.38.188

🇺🇸 216.180.246.202

🇫🇷 209.242.192.183

🇮🇹 193.204.164.175

🇿🇦 168.210.164.79

🇩🇪 157.90.118.178

🇩🇪 142.252.6.120

🇺🇸 104.165.0.172

🇮🇹 93.54.67.227

🇩🇪 69.5.169.212

🇳🇱 45.148.10.157

🇺🇸 43.165.126.130

🇫🇷 37.59.123.164