JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

64.225.13.227

Activity Trending Down

Abuse Confidence Score

40% Elevated

33 reports

28 reporters · latest 1 month ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

33 from 28 distinct reporters

First reported

June 12th 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 10 🇳🇱 Netherlands 8 🇨🇦 Canada 3

Most common categories Web App Attack 24 Bad Web Bot 14 Hacking 6 Brute-Force 5 DDoS Attack 2

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-09-30 02:10:12 UTC · (1 month ago)	2026-09-27 23:50:37,160 fail2ban.actions [8144]: NOTICE [ipblocklist] Ban 64.225.13.227 ...	Bad Web Bot
Anonymous	2026-09-28 11:11:49 UTC · (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-09-27 12:34:56 UTC · (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Error404-LocalePath (/de81964/main/)	Hacking Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-27 12:00:05 UTC · (1 month ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
Anonymous	2026-09-27 11:03:55 UTC · (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing	Bad Web Bot Web App Attack
🇩🇪 Melle	2026-09-27 10:53:17 UTC · (1 month ago)	Blocked by CrowdSec \| Scenario: crowdsecurity/http-probing \| 64.225.13.227 triggered 11 events \| Detected: 2026-09-27T10:53:14.80532912Z	Web App Attack Hacking
Anonymous	2026-09-27 10:49:55 UTC · (1 month ago)	64.225.13.227 - - [27/Sep/2026:18:49:53 +0800] "HEAD /main/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 64.225.13.227 - - [27/Sep/2026:18:49:53 + ... show more 64.225.13.227 - - [27/Sep/2026:18:49:53 +0800] "HEAD /main/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 64.225.13.227 - - [27/Sep/2026:18:49:53 +0800] "HEAD /backup/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 64.225.13.227 - - [27/Sep/2026:18:49:53 +0800] "HEAD /store/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 64.225.13.227 - - [27/Sep/2026:18:49:54 +0800] "HEAD /press/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 64.225.13.227 - - [27/Sep/2026:18:49:54 +0800] "HEAD /wordpress/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" 64.225.13.22 ... show less	Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-09-27 10:19:46 UTC · (1 month ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📂 Directory Listings (Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)	Hacking Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-27 10:00:09 UTC · (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 Alt255	2026-09-27 09:10:16 UTC · (1 month ago)	[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 64.225.13.227 - - [27/Sep/2026:11:09:25 +0200] "HEAD /main/ HTTP/1.1" 404 0 "http://heren-sieraden.nl/main/" "Mozilla/5.0 (Linux; Andr ... show more [cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 64.225.13.227 - - [27/Sep/2026:11:09:25 +0200] "HEAD /main/ HTTP/1.1" 404 0 "http://heren-sieraden.nl/main/" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" 64.225.13.227 - - [27/Sep/2026:11:09:27 +0200] "HEAD /backup/ HTTP/1.1" 404 0 "http://heren-sieraden.nl/backup/" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1" 64.225.13.227 - - [27/Sep/2026:11:09:28 +0200] "HEAD /store/ HTTP/1.1" 404 0 "http://heren-sieraden.nl/store/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 64.225.13.227 - - [27/Sep/2026:11:09:29 +0200] "HEAD /press/ HTTP/1.1" 404 0 "http://heren-sierade ... show less	Bad Web Bot Web App Attack
🇩🇪 rhofas	2026-09-27 08:44:48 UTC · (1 month ago)	Automated PHP shell scanner - 404 flood on hofas.net	Web App Attack Hacking
Anonymous	2026-09-27 08:20:12 UTC · (1 month ago)	Bot / seems abusive / Apache connections: 21	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-09-27 07:57:18 UTC · (1 month ago)	Aggressive scanning resulting into 404	Bad Web Bot
🇪🇸 pipeline.es	2026-09-27 07:32:33 UTC · (1 month ago)	Web scanning / probing for vulnerable paths \| URL: /portal/ \| Evidence: landingow.aavv.com 64.225.13.227 - - [27/Sep/2026:09:07:24 +0200] \"HEAD /portal/ HTTP/1.1\" 404 - \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTM ... show more Web scanning / probing for vulnerable paths \| URL: /portal/ \| Evidence: landingow.aavv.com 64.225.13.227 - - [27/Sep/2026:09:07:24 +0200] \"HEAD /portal/ HTTP/1.1\" 404 - \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15\" GEOIP_COUNTRY_CODE=US \| ASN: DIGITALOCEAN-ASN \| Country: US show less	Port Scan Web App Attack
🇳🇱 Alt255	2026-09-27 07:28:05 UTC · (1 month ago)	[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 64.225.13.227 - - \[27/Sep/2026:09:27:59 +0200\] "HEAD /main/ HTTP/1.1" 404 141 "-" "Mozilla/5.0 \(Linux\; Android 13\; Nokia G42 5G\) Ap ... show more [ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 64.225.13.227 - - \[27/Sep/2026:09:27:59 +0200\] "HEAD /main/ HTTP/1.1" 404 141 "-" "Mozilla/5.0 \(Linux\; Android 13\; Nokia G42 5G\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/126.0.6478.41 Mobile Safari/537.36" 64.225.13.227 - - \[27/Sep/2026:09:27:59 +0200\] "HEAD /backup/ HTTP/1.1" 404 141 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 13_5\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/16.5 Safari/605.1.15" 64.225.13.227 - - \[27/Sep/2026:09:27:59 +0200\] "HEAD /store/ HTTP/1.1" 404 141 "-" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/118.0.5993.90 Safari/537.36" 64.225.13.227 - - \[27/Sep/2026:09:27:59 +0200\] "HEAD /press/ HTTP/1.1" 404 141 "-" "Mozilla/5.0 \(X1 ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.228

🇵🇦 181.178.60.140

🇷🇴 80.94.95.118

🇻🇳 58.186.20.143

🇺🇦 37.52.68.243

🇺🇸 147.185.132.183

🇨🇴 138.84.41.250

🇳🇱 185.242.226.95

🇲🇴 182.93.7.194

🇲🇾 121.121.56.225

🇩🇪 109.160.32.38

🇳🇱 89.21.67.135

🇳🇱 77.67.26.229

🇳🇱 64.205.72.188

🇵🇱 46.149.208.204

🇷🇴 46.102.249.112

🇧🇪 34.62.25.39

🇫🇷 207.180.215.239

🇹🇼 198.235.24.82

🇨🇳 183.224.97.83