JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 64.225.68.252

64.225.68.252 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 51%: ?

51%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 64.225.68.252

Whois 64.225.68.252

IP Abuse Reports for 64.225.68.252:

This IP address has been reported a total of 13 times from 11 distinct sources. 64.225.68.252 was first reported on July 26th 2021, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-09-19 17:34:50 (4 minutes ago)	WordPress: User enumeration. Pattern match "(author\\\\= (88030-197)	Hacking
🇮🇹 CoreTech srl	2026-09-19 14:58:56 (2 hours ago)	cloudlinux2 fail2ban: 2026-09-19 16:54:58,915 fail2ban.filter [1813]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-09-19 16:54:58,915 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 82.43.74.200 - 2026-09-19 16:54:58cloudlinux2 fail2ban: 2026-09-19 16:55:23,712 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 180.190.5.70 - 2026-09-19 16:55:23cloudlinux2 fail2ban: 2026-09-19 16:55:44,696 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 64.225.68.252 - 2026-09-19 16:55:44cloudlinux2 fail2ban: 2026-09-19 16:56:18,351 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 180.190.5.70 - 2026-09-19 16:56:18cloudlinux2 fail2ban: 2026-09-19 16:56:35,756 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 212.79.110.18 - 2026-09-19 16:56:34cloudlinux2 fail2ban: 2026-09-19 16:57:22,291 fail2ban.filter [1813]: INFO [recidive] Found 180.190.5.70 - 2026-09-19 16:57:22cloudlinux2 fail2ban: 2026-09-19 16:57:21,948 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 180.190.5.70 - 2026-09-19 16:57:21cloudlinux2 f show less	Web App Attack
🇪🇸 robotstxt	2026-09-18 00:46:20 (1 day ago)	64.225.68.252 - - [18/Sep/2026:00:45:08 +0000] "GET /?author=2 HTTP/1.1" 403 1170 "-" "Mozilla/5.0 ( ... show more 64.225.68.252 - - [18/Sep/2026:00:45:08 +0000] "GET /?author=2 HTTP/1.1" 403 1170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0" "-" edge="64.225.68.252" 64.225.68.252 - - [18/Sep/2026:00:45:11 +0000] "GET /?author=3 HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:87.0) Gecko/20100101 Firefox/87.0" "-" edge="64.225.68.252" 64.225.68.252 - - [18/Sep/2026:00:45:14 +0000] "GET /?author=4 HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0" "-" edge="64.225.68.252" 64.225.68.252 - - [18/Sep/2026:00:45:25 +0000] "GET /?author=5 HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0" "-" edge="64.225.68.252" 64.225.68.252 - - [18/Sep/2026:00:45:27 +0000] "GET /?author=6 HTTP/1.1" 403 1171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" "-" edge="64.225.68.252" ... show less	Web App Attack
🇦🇺 A.i.D.A.N.N	2026-09-17 12:43:34 (2 days ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected	Web App Attack
🇩🇪 LRob	2026-09-17 09:33:59 (2 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users (+1 more) \| query: author=1 \| 2026-09-17 09:33 UTC show less	Hacking Web App Attack
🇺🇸 mnsf	2026-09-17 06:05:21 (2 days ago)	Too many Status 40X (13) Scanning/Probing (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 04:32:02 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 64.225.68.252 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 64.225.68.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 00:31:56.400115 2026] [security2:error] [pid 24962:tid 24962] [client 64.225.68.252:44014] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|scswat.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scswat.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aqttPAfXW1E-mIB6gh9EpgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-08-24 04:10:24 (3 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 mnsf	2026-08-23 09:05:14 (3 weeks ago)	Login Too Frequent (12)	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-23 05:43:51 (3 weeks ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)	Hacking
🇳🇱 Linuxmalwarehuntingnl	2024-07-04 07:05:09 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇨🇿 akac	2023-07-26 23:30:27 (3 years ago)	Added into the Abuse.ch ThreatFox IOC database by @drb_ra for being involved with the malware family ... show more Added into the Abuse.ch ThreatFox IOC database by @drb_ra for being involved with the malware family Cobalt Strike with tags: CobaltStrike, cs-watermark-987654321, DIGITALOCEAN-ASN. Source: https://threatfox.abuse.ch/ioc/1140630/ show less	Hacking Exploited Host
🇩🇪 ludgerberning	2021-07-26 17:40:03 (5 years ago)	email spam	Email Spam

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 109.205.211.21

🇬🇧 2a06:4884:1000::1c

🇯🇵 202.231.83.38

🇨🇴 200.35.54.73

🇪🇬 154.183.133.197

🇭🇰 152.32.129.154

🇰🇷 112.151.168.124

🇧🇬 109.160.32.94

🇺🇸 74.82.47.6

🇫🇷 37.187.35.26

🇸🇬 2a12:f546:ffe:b309:63fd:2a85:5940:7ca5

🇸🇬 2a12:f544:f7d8:e86d:b88d:fc53:f428:517a

🇺🇸 2600:1900:0:2d06::1800

🇧🇷 200.149.213.242

🇺🇸 192.178.15.8

🇯🇵 153.126.165.228

🇨🇳 42.51.37.12

🇯🇵 34.97.102.203

🇨🇳 14.103.20.9

🇧🇷 179.190.203.44