AbuseIPDB » 64.227.25.52
64.227.25.52
This IP was reported 7 times. Confidence of
Abuse
is 29% : ?
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇺🇸
United States of America
City
North Bergen, New Jersey
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 64.227.25.52 :
This IP address has been reported a total of
7
times from
4 distinct
sources.
64.227.25.52 was first reported on
October 23rd 2026 , and the most recent report was
5 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇦🇺
paulshipley.com.au
2026-10-27 02:06:00
(5 hours ago)
[Tue Oct 27 13:05:59.187541 2026] [security2:error] [pid 189736] [client 64.227.25.52:26834] [client ...
show more
[Tue Oct 27 13:05:59.187541 2026] [security2:error] [pid 189736] [client 64.227.25.52:26834] [client 64.227.25.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "talentaymerch.com.au"] [uri "/wp-content/plugins/tutor/includes/droip/build/css/editor.min.css"] [unique_id "auAHB2vCVVKbZ83ChN9l-wAAAAc"]
...
show less
Web App Attack
🇨🇭
4server
2026-10-27 01:47:16
(5 hours ago)
[TueOct2702:47:10.3389162026][security2:error][pid2721848:tid2721895][client64.227.25.52:0]ModSecuri ...
show more
[TueOct2702:47:10.3389162026][security2:error][pid2721848:tid2721895][client64.227.25.52:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"shadowdrummer.com\"][uri\"/wp-content/plugins/tutor/includes/droip/build/css/editor.min.css\"][unique_id\"auACnmuim_4vCDTte0YluwAAAEY\"]
show less
Hacking
Web App Attack
🇩🇪
mravb
2026-10-27 00:44:37
(6 hours ago)
64.227.25.52 - - [27/Oct/2026:02:44:36 +0200] "GET /wp-content/plugins/tutor/includes/droip/build/cs ...
show more
64.227.25.52 - - [27/Oct/2026:02:44:36 +0200] "GET /wp-content/plugins/tutor/includes/droip/build/css/editor.min.css HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:139.0) Gecko/20100101 Firefox/139.0"
...
show less
Web App Attack
Hacking
🇦🇺
paulshipley.com.au
2026-10-27 00:26:36
(7 hours ago)
[Tue Oct 27 11:26:35.400219 2026] [security2:error] [pid 183294] [client 64.227.25.52:38444] [client ...
show more
[Tue Oct 27 11:26:35.400219 2026] [security2:error] [pid 183294] [client 64.227.25.52:38444] [client 64.227.25.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/wp-content/plugins/tutor/includes/droip/build/css/editor.min.css"] [unique_id "at_vu0833ZsE9omevb9xuQAAAA4"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-26 23:58:38
(7 hours ago)
[Tue Oct 27 10:58:38.324663 2026] [security2:error] [pid 183293] [client 64.227.25.52:13826] [client ...
show more
[Tue Oct 27 10:58:38.324663 2026] [security2:error] [pid 183293] [client 64.227.25.52:13826] [client 64.227.25.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iaki.com.au"] [uri "/wp-content/plugins/tutor/includes/droip/build/css/editor.min.css"] [unique_id "at_pLpM7wPcT5U4hdSdf7QAAAAk"]
...
show less
Web App Attack
🇨🇭
backslash
2026-10-23 20:48:00
(3 days ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇦🇺
paulshipley.com.au
2026-10-23 19:41:24
(3 days ago)
[Sat Oct 24 06:41:24.277708 2026] [security2:error] [pid 194045] [client 64.227.25.52:65314] [client ...
show more
[Sat Oct 24 06:41:24.277708 2026] [security2:error] [pid 194045] [client 64.227.25.52:65314] [client 64.227.25.52] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/"] [unique_id "atu4ZPy4WtzgBb40gQCqSgAAACM"]
...
show less
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: