JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.225.38.102

64.225.38.102 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.225.38.102

Whois 64.225.38.102

IP Abuse Reports for 64.225.38.102:

This IP address has been reported a total of 30 times from 27 distinct sources. 64.225.38.102 was first reported on October 20th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Philister11	2026-10-21 02:11:33 (2 days ago)	CrowdSec: crowdsecurity/http-probing (US/AS14061)	Web App Attack Hacking
🇫🇷 ✨	2026-10-21 01:28:07 (2 days ago)	Domain : saraoldfield.net Rule : Method-Head 2026-10-21 01:26:48 *hidden-privacy46 HEAD /wordpr ... show more Domain : saraoldfield.net Rule : Method-Head 2026-10-21 01:26:48 hidden-privacy*46 HEAD /wordpress/ - 443 - 64.225.38.102 HTTP/2.0 Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36 http://saraoldfield.net/wordpress/ saraoldfield.net 404 0 2 307 265 177 - - show less	Port Scan
🇺🇸 dot.mg	2026-10-21 01:20:04 (2 days ago)	Bad behaviour	Web Spam
🇩🇪 todix	2026-10-21 01:12:54 (2 days ago)	"GET /new/ HTTP/1.1" 301 5697 "/new/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605. ... show more "GET /new/ HTTP/1.1" 301 5697 "/new/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" show less	Web App Attack
Anonymous	2026-10-21 01:09:11 (2 days ago)	Bot / seems abusive / Apache connections: 30	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇩🇪 itxworks.com	2026-10-21 00:41:50 (2 days ago)	Honeypot hit: web probing / scanner. Auto-reported by CrowdSec.	Web App Attack Bad Web Bot
Anonymous	2026-10-21 00:33:41 (2 days ago)	64.225.38.102 - - [21/Oct/2026:02:33:39 +0200] "HEAD /content/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Win ... show more 64.225.38.102 - - [21/Oct/2026:02:33:39 +0200] "HEAD /content/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 64.225.38.102 - - [21/Oct/2026:02:33:39 +0200] "HEAD /wordpress/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15" 64.225.38.102 - - [21/Oct/2026:02:33:39 +0200] "HEAD /cms/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" 64.225.38.102 - - [21/Oct/2026:02:33:39 +0200] "HEAD /web/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 64.225.38.102 - - [21/Oct/2026:02:33:39 +0200] "HEAD /store/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 64.225.38.102 - - [21/Oct/20 ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-21 00:18:10 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 poundawebsiteltd	2026-10-20 23:59:56 (2 days ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 64.225.38. ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 64.225.38.102 (US/United States/-): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 64.225.38.102 (US/United States/-): 20 in the last 3600 secs show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-10-20 23:14:18 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127	Exploited Host Web App Attack
🇧🇪 cmbplf	2026-10-20 23:08:46 (2 days ago)	9.031 requests from abuseipdb.com blacklisted IP (1w6d22h)	Brute-Force Bad Web Bot
🇳🇱 Alt255	2026-10-20 22:03:34 (2 days ago)	[ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <nam ... show more [ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 64.225.38.102 - - [21/Oct/2026:00:03:26 +0200] "HEAD /content/ HTTP/1.1" 404 5561 "http://saplana.es/content/" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36" 64.225.38.102 - - [21/Oct/2026:00:03:26 +0200] "HEAD /wordpress/ HTTP/1.1" 404 266 "http://saplana.es/wordpress/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 64.225.38.102 - - [21/Oct/2026:00:03:27 +0200] "HEAD /cms/ HTTP/1.1" 404 266 "http://saplana.es/cms/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 64.225.38.102 - - [21/Oct/2026: ... show less	Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-10-20 21:53:33 (2 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 81>=65, Abuse 92, NonEU, first-seen) show less	Hacking Exploited Host Web App Attack
🇳🇱 melroy89	2026-10-20 20:40:24 (2 days ago)	64.225.38.102 - - [20/Oct/2026:22:40:11 +0200] "HEAD /content/ HTTP/2.0" 403 0 "http://savefavo.nl/ ... show more 64.225.38.102 - - [20/Oct/2026:22:40:11 +0200] "HEAD /content/ HTTP/2.0" 403 0 "http://savefavo.nl/content/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" "savefavo.nl" 0.000 64.225.38.102 - - [20/Oct/2026:22:40:11 +0200] "HEAD /wordpress/ HTTP/2.0" 403 0 "http://savefavo.nl/wordpress/" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36" "savefavo.nl" 0.000 64.225.38.102 - - [20/Oct/2026:22:40:12 +0200] "HEAD /cms/ HTTP/2.0" 403 0 "http://savefavo.nl/cms/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" "savefavo.nl" 0.001 64.225.38.102 - - [20/Oct/2026:22:40:12 +0200] "HEAD /web/ HTTP/2.0" 403 0 "http://savefavo.nl/web/" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" "savefa ... show less	Web App Attack
🇬🇧 Greg Poulson	2026-10-20 20:16:45 (2 days ago)	Our website was hit by this DDOS at a rate of 84 in 5 minutes.	DDoS Attack Web Spam Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 240e:97d:10:2500::e

🇺🇸 172.70.35.215

🇭🇰 148.66.49.226

🇭🇰 121.202.201.174

🇩🇪 104.28.229.13

🇬🇧 92.207.4.157

🇨🇳 61.149.183.194

🇺🇸 50.84.211.204

🇳🇱 45.148.10.152

🇨🇳 219.151.22.113

🇹🇼 211.22.123.63

🇮🇶 169.224.5.222

🇩🇪 104.28.229.15

🇹🇬 102.64.163.0

🇺🇸 70.183.226.20

🇷🇺 46.191.141.152

🇦🇺 32.236.164.149

🇺🇸 208.102.149.137

🇮🇶 185.158.22.150

🇩🇿 154.241.65.138