JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

64.225.30.103

Neutral Activity

Abuse Confidence Score

0% Low Risk

33 reports

30 reporters · latest 9 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

64.225.30.103 has been reported 33 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

33 from 30 distinct reporters

First reported

December 30th 2025

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 [email protected]	2026-01-17 00:54:24 UTC · (9 months ago)	...	Brute-Force SSH
🇪🇸 Gem	2026-01-16 23:10:04 UTC · (9 months ago)	Unauthorized web scan.	Web App Attack
🇨🇳 ThreatBook.io	2026-01-14 00:35:36 UTC · (10 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/64.225.30.103 2026-01-13 00:22:03 /+CSCOE+/logon_forms.js 2026-01-13 00:22:04 /+CSCOL+/a1.jar 2026-01-13 00:22:06 /+CSCOE+/transfer.js 2026-01-13 01:24:13 /+CSCOL+/Java.jar ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/64.225.30.103 2026-01-13 00:22:03 /+CSCOE+/logon_forms.js 2026-01-13 00:22:04 /+CSCOL+/a1.jar 2026-01-13 00:22:06 /+CSCOE+/transfer.js 2026-01-13 01:24:13 /+CSCOL+/Java.jar 2026-01-13 00:22:00 /+CSCOL+/Java.jar 2026-01-13 01:24:15 /+CSCOE+/logon_forms.js show less	Web App Attack
🇨🇴 adalbertoreyes.org	2026-01-14 00:28:05 UTC · (10 months ago)	CategoryPortScan	Port Scan
Anonymous	2026-01-13 00:27:00 UTC · (10 months ago)	GET /+CSCOE+/logon.html	Hacking Brute-Force Web App Attack
🇫🇷 Pythagus	2026-01-13 00:17:49 UTC · (10 months ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇧🇷 SOC Blue Team	2026-01-12 21:25:35 UTC · (10 months ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇩🇪 kkeyser	2026-01-12 19:57:37 UTC · (10 months ago)	GET /+CSCOE+/logon_forms.js HTTP/1.1	Web App Attack
🇬🇧 kiwi.network	2026-01-12 18:46:40 UTC · (10 months ago)	Web application fingerprinting: 64.225.30.103 - - [12/Jan/2026:20:46:36 0200] "GET / CSCOL /Java.jar HTTP/1.1" 404 1834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "targethost ... show more Web application fingerprinting: 64.225.30.103 - - [12/Jan/2026:20:46:36 0200] "GET / CSCOL /Java.jar HTTP/1.1" 404 1834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "targethostIP" "443" 64.225.30.103 - - [12/Jan/2026:20:46:37 0200] "GET / CSCOE /logon_forms.js HTTP/1.1" 404 1834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "targethostIP" "443" 64.225.30.103 - - [12/Jan/2026:20:46:38 0200] "GET / CSCOL /a1.jar HTTP/1.1" 404 1834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "targethostIP" "443" 64.225.30.103 - - [12/Jan/2026:20:46:39 0200] "GET / CSCOE /transfer.js HTTP/1.1" 404 1834 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "targethostIP" "443" show less	Hacking Exploited Host Web App Attack
🇺🇸 ne1for23	2026-01-12 18:45:35 UTC · (10 months ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 64.225.30.103 - - [12/Jan/2026:18:45:35 +0000] "GE ... show more Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 64.225.30.103 - - [12/Jan/2026:18:45:35 +0000] "GET /+CSCOL+/Java.jar HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" show less	Hacking
🇳🇱 Jordy	2026-01-12 18:10:11 UTC · (10 months ago)	12/Jan/2026:19:10:09.219662 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.225.30.103] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PRO ... show more 12/Jan/2026:19:10:09.219662 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.225.30.103] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] [msg "Host header is a numeric IP address"] [data "141.224.196.208"] [severity "WARNING"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "141.224.196.208"] [uri "/+CSCOL+/Java.jar"] [unique_id "aWU5AZTQyvWvax75jHUJEQAAABM"] 12/Jan/2026:19:10:09.804131 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 64.225.30.103] ModSecurity: Warning. Pattern match "^[\\\\\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "736"] [id "920350"] ... show less	Web App Attack
🇺🇸 Starburst SysOp Team	2026-01-12 17:04:47 UTC · (10 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-14)	Hacking Bad Web Bot
🇺🇸 ersei.net	2026-01-12 16:39:35 UTC · (10 months ago)	Brute force multiple 403s	Brute-Force
🇵🇱 dzpk	2026-01-12 16:28:42 UTC · (10 months ago)	[12/Jan/2026:17:28:39 +0100] 176823531974.576442 64.225.30.103 54392 HOST 443 [12/Jan/2026:17:28:40 +0100] 176823532024.911431 64.225.30.103 54394 HOST 443 [12/Jan/2026:17:28:41 +0100] 17682353215.444451 64.225.30.103 54402 HOST 443	Web App Attack
🇺🇸 RogueAutomata	2026-01-12 16:00:53 UTC · (10 months ago)	Detected malicious request: GET /+CSCOL+/Java.jar Detections triggered: Access via IP addr (v4)	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 92.118.39.78

🇧🇬 78.128.114.118

🇺🇸 205.210.31.41

🇳🇱 204.76.203.4

🇺🇸 185.61.220.48

🇺🇸 147.185.132.108

🇮🇷 77.237.185.21

🇨🇳 42.63.158.14

🇺🇸 24.16.100.155

🇫🇮 31.76.50.219

🇧🇷 190.115.84.25

🇸🇬 167.172.82.45

🇺🇸 142.248.80.184

🇸🇬 124.156.205.117

🇬🇧 78.153.140.237

🇺🇸 67.101.5.226

🇻🇳 27.66.218.184

🇹🇼 211.21.61.224

🇳🇱 204.76.203.214

🇳🇱 200.138.46.122