JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.90.144.221

164.90.144.221 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 15%: ?

15%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.90.144.221

Whois 164.90.144.221

IP Abuse Reports for 164.90.144.221:

This IP address has been reported a total of 16 times from 11 distinct sources. 164.90.144.221 was first reported on August 10th 2022, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-07-19 06:35:44 (6 days ago)	tcp/2222	Port Scan
🇺🇸 MPL	2026-07-19 05:24:59 (6 days ago)	tcp/443	Port Scan
Anonymous	2026-07-19 04:57:04 (6 days ago)	denied traffic to a honeypot network. destination port 13000.	Port Scan Hacking
🇦🇹 urnilxfgbez	2025-04-22 22:45:00 (1 year ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 MPL	2024-12-24 14:02:01 (1 year ago)	tcp/2000 (2 or more attempts)	Port Scan
🇺🇸 MPL	2024-12-24 14:00:15 (1 year ago)	tcp/14000	Port Scan
🇦🇺 MAGIC	2024-09-06 05:28:02 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇦 URAN Publishing Service	2024-09-03 17:31:16 (1 year ago)	164.90.144.221 - - [03/Sep/2024:20:31:15 +0300] "GET /wp-config.php~ HTTP/1.1" 404 2866 "-" "python- ... show more 164.90.144.221 - - [03/Sep/2024:20:31:15 +0300] "GET /wp-config.php~ HTTP/1.1" 404 2866 "-" "python-requests/2.32.3" 164.90.144.221 - - [03/Sep/2024:20:31:16 +0300] "GET /wp-config.php.bak HTTP/1.1" 404 2867 "-" "python-requests/2.32.3" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2024-09-03 17:19:35 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 164.90.144.221 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.90.144.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 13:19:29.142095 2024] [security2:error] [pid 16698:tid 16698] [client 164.90.144.221:50188] [client 164.90.144.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vangentholding.com"] [uri "/wp-config.php~"] [unique_id "ZtdFIVg92S2Ik0FdbipacwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2024-09-03 16:30:28 (1 year ago)	528 requests to *.php.bak	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2024-09-03 16:14:52 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 164.90.144.221 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.90.144.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 12:14:48.655595 2024] [security2:error] [pid 21526:tid 21526] [client 164.90.144.221:61064] [client 164.90.144.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldengatecorgis.org"] [uri "/wp-config.php~"] [unique_id "Ztc1-IndLb6U3taYY9BZIAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2024-09-03 16:14:09 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 164.90.144.221 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 164.90.144.221 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 mawan	2024-09-03 14:54:27 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇺🇸 TPI-Abuse	2024-09-03 14:49:57 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 164.90.144.221 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.90.144.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 10:49:53.501783 2024] [security2:error] [pid 11929:tid 11948] [client 164.90.144.221:58821] [client 164.90.144.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "batonrougegazette.com"] [uri "/wp-config.php~"] [unique_id "ZtciERW71VkP3MTiDnwLDwAAAFE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Bytemark	2024-08-30 19:43:41 (1 year ago)	164.90.144.221 - - [30/Aug/2024:20:43:40 +0100] "GET /login.php HTTP/1.1" 301 5938 "-" "python-reque ... show more 164.90.144.221 - - [30/Aug/2024:20:43:40 +0100] "GET /login.php HTTP/1.1" 301 5938 "-" "python-requests/2.32.3" show less	Brute-Force Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.34.139.86

🇳🇱 176.65.148.158

🇵🇱 176.53.159.197

🇺🇸 172.236.228.86

🇩🇪 172.70.246.63

🇺🇸 162.217.100.36

🇨🇭 162.158.217.142

🇨🇳 115.191.66.78

🇺🇸 103.215.75.66

🇳🇱 91.92.42.10

🇬🇧 35.203.210.153

🇺🇸 207.228.42.223

🇫🇷 195.154.59.122

🇧🇷 187.84.113.127

🇻🇳 171.240.79.245

🇧🇷 167.249.227.120

🇩🇪 164.92.161.148

🇸🇬 159.223.93.39

🇸🇬 103.189.235.93

🇩🇰 80.208.57.19