JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.23.153.52

64.23.153.52 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 11%: ?

11%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.23.153.52

Whois 64.23.153.52

IP Abuse Reports for 64.23.153.52:

This IP address has been reported a total of 50 times from 38 distinct sources. 64.23.153.52 was first reported on April 10th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-05-10 04:04:29 (1 month ago)	tcp ports: 443,8001 (2 or more attempts)	Port Scan
Anonymous	2026-05-10 03:59:00 (1 month ago)	unsolicited connect TCP dport 8090 (sport 61008)	Hacking
🇬🇧 consul.to	2026-05-08 00:56:03 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 gu-alvareza	2025-11-06 07:05:06 (7 months ago)	SystemBC.Botnet	DDoS Attack Hacking
🇨🇳 ThreatBook.io	2025-11-06 00:17:25 (7 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/64.23.153.52 2025-1 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/64.23.153.52 2025-11-05 00:51:19 /ab2g 2025-11-05 00:51:20 /ab2h 2025-11-05 00:51:20 /alive.php show less	Web App Attack
Anonymous	2025-11-06 00:13:45 (7 months ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
Anonymous	2025-11-05 15:43:16 (7 months ago)	Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show more Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 lmathe	2025-11-05 12:41:50 (7 months ago)	37.114.56.151 64.23.153.52 US - [05/Nov/2025:13:41:47 +0100] 404 "GET /upl.php HTTP/1.1" referer: "- ... show more 37.114.56.151 64.23.153.52 US - [05/Nov/2025:13:41:47 +0100] 404 "GET /upl.php HTTP/1.1" referer: "-" "Mozilla/5.0" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 311 37.114.56.151 64.23.153.52 US - [05/Nov/2025:13:41:49 +0100] 404 "GET /password.php HTTP/1.1" referer: "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 374 ... show less	Web App Attack
🇺🇸 Gabriel Camargo	2025-11-05 12:33:30 (7 months ago)	64.23.153.52 - - [05/Nov/2025:07:33:29 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 64. ... show more 64.23.153.52 - - [05/Nov/2025:07:33:29 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 64.23.153.52 - - [05/Nov/2025:07:33:29 -0500] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 64.23.153.52 - - [05/Nov/2025:07:33:29 -0500] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" ... show less	Brute-Force SSH
🇬🇧 powersec	2025-11-05 12:04:00 (7 months ago)	Malicious Network Traffic. Request: \x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xEA\xDF\xCB\xA4j\xBD\xAEu ... show more Malicious Network Traffic. Request: \x16\x03\x01\x00{\x01\x00\x00w\x03\x03\xEA\xDF\xCB\xA4j\xBD\xAEu\xBC\xF0\xDBf2>\xEE\x88\xFE\x0Eyjf\xFA?rD\xDF#\x15\xD2\xD4n-\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0 show less	Hacking Bad Web Bot Web App Attack
🇺🇸 WebRanger	2025-11-05 09:13:18 (7 months ago)	\x16\x03\x01\x00\x01\x00\x00w\x03\x03\x1BB\x11neP\x00\xC1\xEB\xCFM\xC6\x01\xB0Hx\xFC\x9A\x97Z\xE8\xB ... show more \x16\x03\x01\x00\x01\x00\x00w\x03\x03\x1BB\x11neP\x00\xC1\xEB\xCFM\xC6\x01\xB0Hx\xFC\x9A\x97Z\xE8\xB5I\x9Aj\xB9\x08\xC1\xBC\x02x\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0 400 150 "- \x16\x03\x01\x00\x01\x00\x00w\x03\x03\x1BB\x11neP\x00\xC1\xEB\xCFM\xC6\x01\xB0Hx\xFC\x9A\x97Z\xE8\xB5I\x9Aj\xB9\x08\xC1\xBC\x02x\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "- show less	Bad Web Bot Web App Attack
🇺🇸 netllama	2025-11-05 05:29:57 (7 months ago)	[Tue Nov 04 21:29:56.345801 2025] [proxy_fcgi:error] [pid 817196:tid 817232] [client 64.23.153.52:60 ... show more [Tue Nov 04 21:29:56.345801 2025] [proxy_fcgi:error] [pid 817196:tid 817232] [client 64.23.153.52:60436] AH01071: Got error 'Primary script unknown' [Tue Nov 04 21:29:56.360038 2025] [proxy_fcgi:error] [pid 817196:tid 817243] [client 64.23.153.52:60466] AH01071: Got error 'Primary script unknown' ... show less	Hacking Web App Attack
Anonymous	2025-11-05 05:22:05 (7 months ago)	B: f2b 404 5x	Web App Attack
Anonymous	2025-11-05 04:54:18 (7 months ago)	Reported from Nginx log analysis 19. Log: 64.23.153.52 - - [05/Nov/2025:xx:xx:xx 0100] "GET /ab2g H ... show more Reported from Nginx log analysis 19. Log: 64.23.153.52 - - [05/Nov/2025:xx:xx:xx 0100] "GET /ab2g HTTP/1.1" xxx xxx "-" "Mozilla/5.0 zgrab/0.x" "-" "US United States Santa Clara" "AS14061" "DIGITALOCEAN-ASN" show less	Port Scan Brute-Force SSH
🇫🇷 service Informatique	2025-11-05 04:00:37 (7 months ago)	GET /t4	Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.232.176.7

🇳🇱 213.177.179.79

🇰🇬 212.112.126.241

🇺🇸 20.80.88.197

🇨🇳 220.243.133.81

🇧🇪 207.175.99.79

🇧🇷 200.159.0.218

🇮🇳 167.71.239.213

🇺🇸 148.153.245.161

🇳🇱 145.90.8.9

🇳🇱 134.209.95.237

🇮🇳 115.96.206.53

🇪🇸 95.18.64.78

🇸🇦 94.99.170.6

🇳🇱 91.92.42.19

🇺🇿 84.54.92.34

🇸🇦 51.36.227.134

🇳🇱 45.153.34.186

🇳🇱 45.153.34.112

🇺🇸 20.168.0.74