JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

64.225.49.197

Neutral Activity

Abuse Confidence Score

0% Low Risk

37 reports

27 reporters · latest 1 year ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

64.225.49.197 has been reported 37 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

37 from 27 distinct reporters

First reported

August 30th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 ISPLtd	2025-09-01 15:49:06 UTC · (1 year ago)	Web probe	Port Scan
🇫🇷 Pythagus	2025-09-01 00:12:52 UTC · (1 year ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇵🇱 UMP-PL	2025-08-31 18:26:21 UTC · (1 year ago)	64.225.49.197 - - [31/Aug/2025:20:26:20 +0200] "GET /upl.php HTTP/1.1" 500 806 "-" "Mozilla/5.0" ...	Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-08-31 18:10:42 UTC · (1 year ago)	Port probe to tcp/80 (http) [srv125]	Port Scan Bad Web Bot Web App Attack
🇪🇸 yvoictra	2025-08-31 14:51:16 UTC · (1 year ago)	64.225.49.197 - - [31/Aug/2025:16:51:15 +0200] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 64.225.49.197 - - [31/Aug/2025:16:51:15 +0200] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 64.225.49.197 - - [31/Aug/2025:16:51:15 +0200] "GET /t4 ... show more 64.225.49.197 - - [31/Aug/2025:16:51:15 +0200] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 64.225.49.197 - - [31/Aug/2025:16:51:15 +0200] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 64.225.49.197 - - [31/Aug/2025:16:51:15 +0200] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" 64.225.49.197 - - [31/Aug/2025:16:51:15 +0200] "GET /geoip/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 64.225.49.197 - - [31/Aug/2025:16:51:16 +0200] "GET /favicon.ico HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
Anonymous	2025-08-31 14:28:18 UTC · (1 year ago)	bad ssl requests	Port Scan Hacking Web App Attack
🇩🇪 Honeypot-EU-Fru	2025-08-31 12:39:07 UTC · (1 year ago)	64.225.49.197 - - [redacted] [31/Aug/2025:14:39:06 +0200] "GET /form.html HTTP/1.1" 404 125 "-" "curl/8.1.2" 0.000 - - 64.225.49.197 - - [redacted] [31/Aug/2025:14:39:06 +0200] "GET /upl.php HTT ...	Bad Web Bot Web App Attack
🇧🇷 ufn.edu.br	2025-08-31 10:07:47 UTC · (1 year ago)	[Sun Aug 31 07:07:30.404560 2025] [access_compat:error] [pid 16195] [client 64.225.49.197:54944] AH01797: client denied by server configuration: /var/www/html/upl.php [Sun Aug 31 07:07:31.551300 2025] [access_compat:error] [pid 16195] [client 64.225. ... show more [Sun Aug 31 07:07:30.404560 2025] [access_compat:error] [pid 16195] [client 64.225.49.197:54944] AH01797: client denied by server configuration: /var/www/html/upl.php [Sun Aug 31 07:07:31.551300 2025] [access_compat:error] [pid 16195] [client 64.225.49.197:54972] AH01797: client denied by server configuration: /var/www/html/1.php [Sun Aug 31 07:07:46.410128 2025] [access_compat:error] [pid 16198] [client 64.225.49.197:54990] AH01797: client denied by server configuration: /var/www/html/password.php ... show less	Exploited Host Web App Attack
🇺🇸 TJTheSpy	2025-08-31 09:45:13 UTC · (1 year ago)	64.225.49.197 - - [31/Aug/2025:03:45:12 -0600] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x9C=\xB1\x00bu&\xB3\xED\x91\x82\xC4oP\x8F\x16\xB2}\xC2y^\xBF\x8E\x80\x81\xC4\x8B8\x8C\x82'\x8A\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 4 ... show more 64.225.49.197 - - [31/Aug/2025:03:45:12 -0600] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x9C=\xB1\x00bu&\xB3\xED\x91\x82\xC4oP\x8F\x16\xB2}\xC2y^\xBF\x8E\x80\x81\xC4\x8B8\x8C\x82'\x8A\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" 64.225.49.197 - - [31/Aug/2025:03:45:12 -0600] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03t\xF7\xEF\x83\xB34\x9A\xF5\xED`\xA3\xA8bZ\x92R\x01\xAB\xBD\x9A\xB0\x84\xC5`\xCD\x93\x13\x96A\xF2\xC9 \x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" ... show less	Bad Web Bot
🇨🇭 zynex	2025-08-31 09:05:00 UTC · (1 year ago)	URL Probing: /upl.php	Web App Attack
Anonymous	2025-08-31 07:39:18 UTC · (1 year ago)	<comment>	Web App Attack
Anonymous	2025-08-31 07:38:19 UTC · (1 year ago)	64.225.49.197 - - [31/Aug/2025:16:38:18 +0900] "GET / HTTP/1.1" 403 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 64.225.49.197 - - [31/Aug/2025:16:38:18 +0900] "GET /form.ht ... show more 64.225.49.197 - - [31/Aug/2025:16:38:18 +0900] "GET / HTTP/1.1" 403 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 64.225.49.197 - - [31/Aug/2025:16:38:18 +0900] "GET /form.html HTTP/1.1" 403 440 "-" "curl/8.1.2" 64.225.49.197 - - [31/Aug/2025:16:38:18 +0900] "GET /upl.php HTTP/1.1" 403 440 "-" "Mozilla/5.0" ... show less	Brute-Force
Anonymous	2025-08-31 07:22:06 UTC · (1 year ago)	64.225.49.197 - - [31/Aug/2025:07:22:05 +0000] "GET / HTTP/1.1" 400 68679 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 64.225.49.197 - - [31/Aug/2025:07:22:05 +0000] "G ... show more 64.225.49.197 - - [31/Aug/2025:07:22:05 +0000] "GET / HTTP/1.1" 400 68679 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 64.225.49.197 - - [31/Aug/2025:07:22:05 +0000] "GET /form.html HTTP/1.1" 400 68456 "-" "curl/8.1.2" "-" "-" 64.225.49.197 - - [31/Aug/2025:07:22:05 +0000] "GET /upl.php HTTP/1.1" 400 68436 "-" "Mozilla/5.0" "-" "-" 64.225.49.197 - - [31/Aug/2025:07:22:05 +0000] "GET /t4 HTTP/1.1" 400 68381 "-" "Mozilla/5.0" "-" "-" 64.225.49.197 - - [31/Aug/2025:07:22:05 +0000] "GET /geoip/ HTTP/1.1" 400 68657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 64.225.49.197 - - [31/Aug/2025:07:22:05 +0000] "GET /favicon.ico HTTP/1.1" 400 68712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 64.225.49.197 - - [31/Aug/2025:07:22:05 +0000] "GET /1.php H ... show less	Brute-Force SSH
🇭🇺 whitehoodie	2025-08-31 06:45:18 UTC · (1 year ago)	AUTOMATED REPORT: Trying to access /systembc/password.php	Hacking Bad Web Bot Web App Attack
🇳🇱 Study Bitcoin 🤗	2025-08-31 06:42:35 UTC · (1 year ago)	Port probe to tcp/80 (http) [srv125]	Port Scan Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 128.14.229.181

🇺🇸 64.57.142.120

🇺🇦 46.200.206.70

🇲🇾 210.186.105.117

🇪🇨 200.24.137.144

🇭🇰 121.202.150.137

🇨🇭 104.244.79.113

🇰🇪 102.204.13.243

🇺🇸 91.230.168.253

🇷🇺 85.30.235.176

🇸🇰 77.247.225.179

🇬🇧 154.16.44.249

🇳🇱 81.19.216.97

🇺🇸 66.132.159.109

🇺🇸 20.40.220.110

🇰🇷 14.51.12.142

🇦🇲 176.32.193.16

🇺🇸 156.242.103.159

🇺🇸 104.168.60.46

🇨🇦 85.217.149.19