167.172.234.2
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Clifton, New Jersey
No reports in the last 60 days
167.172.234.2 has been reported 48 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
48 from
27 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 openstrike.co.uk |
7 attacks on VC URLs:
GET /.git/config HTTP/1.1
|
Hacking | |
| 🇬🇧 [email protected] |
...
|
Brute-Force SSH | |
| Anonymous |
IP banned by Fail2Ban in jail nginx-abusive-ips
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-28.
|
Hacking Web App Attack SSH | |
| 🇫🇷 masterguru |
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
|
Hacking Web App Attack | |
| 🇩🇪 DocNetzwerk |
(mod_security) mod_security triggered on hostname [redacted] 167.172.234.2 (US/United States/-)
|
SQL Injection | |
| 🇧🇪 Ivo Vynckier |
167.172.234.2 - - [28/Nov/2025:21:45:17 +0100] "GET /.git/config HTTP/1.1" 403 177 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
|
Web App Attack | |
| 🇳🇱 jjnxpct |
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config]
|
Hacking Web App Attack | |
| Anonymous |
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host | |
| 🇨🇭 Ribeye375 |
HIPS nginx-access-errors - Block tcp/http,https
|
Brute-Force | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
|
Hacking Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇫🇷 dynamix |
Multiple WAF Violations
|
Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown