64.94.159.226

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
32% Elevated
62 reports
45 reporters · latest 1 month ago
ISP
Internet Measurement Research
Usage Type
University/College/School
ASN
AS399628
Domain Name
internetmeasurementresearch.com
Country
🇺🇸 United States of America
City
Ashburn, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
62 from 45 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 3 🇮🇩 Indonesia 2
Most common categories Port Scan 17 Hacking 11 Web App Attack 7 Bad Web Bot 3 Brute-Force 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 8443/HTTPS-alt | Proto: TCP(1) | Flags: all SYN | TTL: 50 | Len: 52B | Win: 65535(1) | F2B/ufw-honeypot@2026-10-08T01:17:02Z
Port Scan Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 8443) Source port: 33078 TTL: 54 Packet length: 52 TOS: 0x00 This report (for 64.94.159.226) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇨🇭 Elysium Security
Mass port scanning on a whole network
Port Scan
Anonymous
[TCP/110] Unsolicited connection attempt on a port with no legitimate public service.
Port Scan Hacking
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇺🇸 NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
Anonymous
CrowdSec detection | scenario: udm-wan-slow-portscan
Port Scan Web App Attack
🇺🇸 technash
Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.
Port Scan
🇳🇱 VMHeaven.io
Blocked by UFW [22/tcp] Source port: 40841 TTL: 53 Packet length: 52
Port Scan SSH Brute-Force
Anonymous
Repeated unauthorized connection attempts to restricted service observed.
Port Scan Hacking Bad Web Bot Web App Attack
Anonymous
unsolicited connect TCP dport 23 (sport 48722)
Hacking
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 123).
Hacking Web App Attack
🇩🇪 DasDuo
Attempt on port 80 (HTTP) - potential web application attack attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan Web App Attack
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 122).
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.52
🇺🇸 172.234.217.192
🇦🇷 148.227.74.113
🇷🇴 92.118.39.211
🇫🇷 91.196.152.236
🇺🇸 74.110.108.156
🇺🇸 66.132.172.96
🇨🇳 60.16.216.168
🇩🇪 212.132.75.202
🇳🇱 193.176.31.205
🇺🇸 139.144.222.239
🇩🇪 139.19.117.129
🇷🇴 92.118.39.14
🇺🇸 66.229.6.129
🇺🇸 51.8.102.190
🇸🇬 43.133.36.60
feedback