JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.172.160.47

167.172.160.47 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.172.160.47

Whois 167.172.160.47

IP Abuse Reports for 167.172.160.47:

This IP address has been reported a total of 58 times from 37 distinct sources. 167.172.160.47 was first reported on July 14th 2022, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 Erpelstolz	2025-11-21 21:08:09 (6 months ago)	VM 131: 167.172.160.47 - - [21/Nov/2025:22:08:08 +0100] "GET /api/.git/config HTTP/1.1" 404 646	Web App Attack
🇺🇸 TPI-Abuse	2025-11-21 17:54:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 167.172.160.47 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 167.172.160.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 12:54:25.247453 2025] [security2:error] [pid 4917:tid 4917] [client 167.172.160.47:33990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.73"] [uri "/prod/.git/config"] [unique_id "aSCnUZXxxZJEW1mtUixWSgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-21 17:36:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 167.172.160.47 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 167.172.160.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 12:36:43.951387 2025] [security2:error] [pid 24922:tid 24922] [client 167.172.160.47:39758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.59"] [uri "/prod/.git/config"] [unique_id "aSCjK16P_dtwaENI_UnY8wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NXTwoThou	2025-11-21 17:36:32 (6 months ago)	/prod/.git/config	Web App Attack
🇳🇱 soverin	2025-11-21 17:23:48 (6 months ago)	Network scan on port 80	Email Spam
🇺🇸 TPI-Abuse	2025-11-21 17:02:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 167.172.160.47 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 167.172.160.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 12:02:24.544888 2025] [security2:error] [pid 15130:tid 15130] [client 167.172.160.47:48124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.189"] [uri "/backend/.git/config"] [unique_id "aSCbIGY8Y7gBNPyiKV0CkwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 novumedukacja.pl	2023-01-14 10:34:27 (3 years ago)	Jul 15 07:31:23 novum-srv2 sshd[11435]: Invalid user ftpuser from 167.172.160.47 port 34266 Jul 15 0 ... show more Jul 15 07:31:23 novum-srv2 sshd[11435]: Invalid user ftpuser from 167.172.160.47 port 34266 Jul 15 07:31:46 novum-srv2 sshd[11438]: Invalid user git from 167.172.160.47 port 60086 Jul 15 07:32:08 novum-srv2 sshd[11468]: Invalid user oracle from 167.172.160.47 port 57582 ... show less	Brute-Force SSH
🇺🇸 MPL	2022-09-27 12:11:51 (3 years ago)	tcp/9050 (12 or more attempts)	Port Scan
🇺🇸 MPL	2022-09-27 10:38:02 (3 years ago)	tcp/9050 (12 or more attempts)	Port Scan
🇫🇷 JPPO	2022-09-27 05:28:32 (3 years ago)	Hit port : 9050	Port Scan
🇳🇱 ATV	2022-09-27 03:20:01 (3 years ago)	Unsolicited connection attempts to port 9050	Port Scan
🇩🇪 KPS	2022-09-27 01:19:37 (3 years ago)	PortscanM	Port Scan
🇫🇷 QUADEMU Abuse Dpt	2022-09-26 22:26:24 (3 years ago)	Noxious/Nuisible/вредоносный Host.	Port Scan Brute-Force
🇺🇸 MPL	2022-09-26 12:07:37 (3 years ago)	tcp/9050 (2 or more attempts)	Port Scan
🇮🇪 RoboSOC	2022-09-26 04:14:23 (3 years ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: theism.0550009999.sna.	Port Scan

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇳🇱 213.177.179.12

🇧🇪 198.235.24.192

🇷🇴 93.114.194.159

🇫🇷 85.217.140.13

🇬🇧 35.203.210.159

🇸🇬 34.126.175.96

🇧🇪 34.62.45.224

🇺🇸 205.210.31.97

🇮🇱 203.159.81.50

🇧🇷 200.233.62.203

🇺🇸 157.245.211.29

🇺🇸 129.121.72.50

🇰🇷 119.203.251.187

🇷🇴 92.118.39.236

🇫🇷 92.92.14.36

🇫🇷 91.196.152.111

🇫🇷 91.196.152.32

🇫🇷 91.196.152.18

🇳🇱 88.210.63.69