64.94.159.131

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
40% Elevated
13 reports
10 reporters · latest 1 week ago
ISP
Internet Measurement Research
Usage Type
University/College/School
ASN
AS399628
Domain Name
internetmeasurementresearch.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
13 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 6 🇮🇪 Ireland 2 🇨🇦 Canada 1
Most common categories Port Scan 9 Brute-Force 4 Hacking 2 SSH 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (61 distinct dst hosts)
Port Scan
🇺🇸 COMPLEX
Unsolicited ICMP traffic | Action: DROP | Port N/A
Brute-Force
🇸🇪 SkyDancer
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
Hacking Brute-Force SSH
🇮🇳 Mr.Singh
NFT blocked 64.94.159.131 on 01-Nov-2026..
Port Scan Brute-Force
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
🇮🇪 RoboSOC
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
Port Scan
🇺🇸 technash
Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.
Port Scan
🇨🇦 Arpan Sen
Network port/address scan: probed 1 distinct port(s) across 17 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan
🇺🇸 tedmichalik.com
64.94.159.131 - - [14/Oct/2026:18:32:44 -0400] "GET /HNAP1 HTTP/1.1" 404 496 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" ...
Web App Attack
🇺🇸 NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
🇺🇸 technash
Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.
Port Scan
🇺🇸 technash
Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.
Port Scan
🇺🇸 OceanTreasure
tcp/6000; Unauthorized scan for remote desktop access via X11 (R18) @ 2026-04-29T21:27:14Z
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 176.53.159.198
🇸🇬 172.70.142.170
🇺🇸 167.71.247.104
🇷🇴 92.118.39.14
🇺🇸 173.255.236.116
🇮🇳 117.216.33.31
🇻🇳 113.173.12.193
🇺🇸 65.49.20.111
🇺🇸 65.49.20.92
🇦🇺 34.40.254.152
🇵🇱 172.64.198.4
🇬🇧 134.209.26.149
🇻🇳 115.77.255.42
🇳🇱 77.239.124.67
🇪🇸 34.175.219.236
🇷🇺 31.184.195.248
feedback