JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 107.170.47.137

107.170.47.137 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Secaucus, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 107.170.47.137

Whois 107.170.47.137

IP Abuse Reports for 107.170.47.137:

This IP address has been reported a total of 119 times from 102 distinct sources. 107.170.47.137 was first reported on June 26th 2026, and the most recent report was 26 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-27 22:03:31 (26 minutes ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-26. show less	Web App Attack SSH Hacking
Anonymous	2026-06-27 20:06:18 (2 hours ago)	Trying to access config files	Web App Attack
🇧🇪 boxed-it	2026-06-27 18:33:48 (3 hours ago)	GET /.env (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇫🇷 service Informatique	2026-06-27 04:00:37 (18 hours ago)	GET /.env	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-26 21:59:47 (1 day ago)	Auto-ban: >3000 req/min op 2026-06-26	Web App Attack SSH Hacking
🇳🇱 oisecnet	2026-06-26 21:02:14 (1 day ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-06-26. 9 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-06-26. 9 requests from this IP. show less	Brute-Force Web App Attack SSH
🇩🇪 CK_beats	2026-06-26 15:16:00 (1 day ago)	107.170.47.137:51060 [26/Jun/2026:06:59:10.305] ReverseProxyDMZ_SSL~ ReverseProxyDMZ_SSL/<NOSRV> -1/ ... show more 107.170.47.137:51060 [26/Jun/2026:06:59:10.305] ReverseProxyDMZ_SSL~ ReverseProxyDMZ_SSL/<NOSRV> -1/-1/-1/-1/1 503 217 - - SC-- 6/6/0/0/0 0/0 "GET https://mta-sts.xx.de/.env HTTP/2.0" show less	Brute-Force Hacking
🇺🇸 TPI-Abuse	2026-06-26 10:02:52 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 107.170.47.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 107.170.47.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 06:02:45.041397 2026] [security2:error] [pid 21107:tid 21107] [client 107.170.47.137:12202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rasuki.com"] [uri "/.env"] [unique_id "aj5ORbA9I-PEoGPTdNwi3gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-26 09:50:21 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 juutis	2026-06-26 09:40:16 (1 day ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇩🇪 MusicLibrary	2026-06-26 09:15:31 (1 day ago)	Attempted access to sensitive configuration files (.env, .git, etc.)	Bad Web Bot Web App Attack
🇨🇭 TheCoon	2026-06-26 08:45:02 (1 day ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇨🇭 4server	2026-06-26 08:44:41 (1 day ago)	[FriJun2610:44:36.0650302026][security2:error][pid3444644:tid3444853][client107.170.47.137:0]ModSecu ... show more [FriJun2610:44:36.0650302026][security2:error][pid3444644:tid3444853][client107.170.47.137:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"vocenellanima.ch\"][uri\"/.env\"][unique_id\"aj479D_S4umLjql1FrZRWQAAAIc\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 08:19:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 107.170.47.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 107.170.47.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 04:19:18.413969 2026] [security2:error] [pid 21028:tid 21028] [client 107.170.47.137:47106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phtaudio.com"] [uri "/.env"] [unique_id "aj42BgmZRDrnspwdlgmkLQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-26 08:04:15 (1 day ago)	107.170.47.137 - - [26/Jun/2026:08:04:13 +0000] "GET /.env HTTP/2.0" 404 1325 "-" "Mozilla/5.0 (Maci ... show more 107.170.47.137 - - [26/Jun/2026:08:04:13 +0000] "GET /.env HTTP/2.0" 404 1325 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.252.53.239

🇺🇸 135.132.67.45

🇰🇷 59.23.3.146

🇮🇳 2401:4900:bc67:c0e2:c4ea:2f7a:6d94:5929

🇳🇱 185.242.226.93

🇮🇹 172.213.152.46

🇺🇸 94.131.64.51

🇨🇿 92.62.233.214

🇳🇱 45.148.10.147

🇨🇦 24.87.166.17

🇺🇸 23.153.217.31

🇫🇷 213.226.72.136

🇹🇼 198.235.24.104

🇨🇳 116.21.239.2

🇸🇪 98.98.190.8

🇮🇳 2401:4900:aabd:a79e:1579:eed0:176e:6b2d

🇬🇧 213.166.84.47

🇨🇳 106.12.159.148

🇺🇸 98.122.215.23

🇺🇸 50.5.205.174