JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.135.180

170.64.135.180 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.135.180

Whois 170.64.135.180

IP Abuse Reports for 170.64.135.180:

This IP address has been reported a total of 55 times from 35 distinct sources. 170.64.135.180 was first reported on February 8th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-08-26 03:09:17 (2 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 170.64.135.180 104.22.127.103 - - [22/Aug/2026:22:55:29 - ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 170.64.135.180 104.22.127.103 - - [22/Aug/2026:22:55:29 -0300] "GET /.git/config HTTP/1.1" 404 414 show less	Bad Web Bot
🇬🇧 openstrike.co.uk	2026-08-24 05:14:24 (4 days ago)	10 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇧🇷 Peregrine	2026-08-24 03:09:23 (4 days ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 170.64.135.180 104.22.127.103 - - [22/Aug/2026:22:55:29 - ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 170.64.135.180 104.22.127.103 - - [22/Aug/2026:22:55:29 -0300] "GET /.git/config HTTP/1.1" 404 414 show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-08-23 21:59:28 (4 days ago)	Auto-ban: >3000 req/min op 2026-08-23	Web App Attack SSH Hacking
🇩🇪 Lino Project	2026-08-23 21:27:26 (5 days ago)	170.64.135.180 - - [23/Aug/2026:23:27:22 +0200] "GET /.git/config HTTP/1.1" 302 467 "-" "Mozilla/5.0 ... show more 170.64.135.180 - - [23/Aug/2026:23:27:22 +0200] "GET /.git/config HTTP/1.1" 302 467 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-23 21:16:57 (5 days ago)	[SunAug2323:16:53.8859092026][security2:error][pid141336:tid141394][client170.64.135.180:0]ModSecuri ... show more [SunAug2323:16:53.8859092026][security2:error][pid141336:tid141394][client170.64.135.180:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ponzellini.ch\"][uri\"/.git/config\"][unique_id\"aotjRVQF5y43AVswTEFmSwAAAE0\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-08-23 20:14:14 (5 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇬🇧 gurnip	2026-08-23 19:32:33 (5 days ago)	Vulnerability probe of page /.git/config, not found on server.	Brute-Force Web App Attack
🇩🇪 on-com	2026-08-23 18:54:56 (5 days ago)	URL scan	Brute-Force Web App Attack
🇫🇮 YF	2026-08-23 16:30:37 (5 days ago)	Git config exposure probe	Web App Attack
🇩🇪 lolyay	2026-08-23 13:23:55 (5 days ago)	170.64.135.180 - - [23/Aug/2026:13:23:52 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 ( ... show more 170.64.135.180 - - [23/Aug/2026:13:23:52 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.135.180 - - [23/Aug/2026:13:23:54 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-23 12:14:30 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 170.64.135.180 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.135.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 08:14:22.290763 2026] [security2:error] [pid 24644:tid 24644] [client 170.64.135.180:51402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ospreylake.org"] [uri "/.git/config"] [unique_id "aorkHvoMikfZu3-fjg7dZQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-08-23 12:01:43 (5 days ago)	170.64.135.180 - - [23/Aug/2026:14:01:43 +0200] "GET /.git/config HTTP/1.1" 302 457 "-" "Mozilla/5.0 ... show more 170.64.135.180 - - [23/Aug/2026:14:01:43 +0200] "GET /.git/config HTTP/1.1" 302 457 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-23 12:00:00 (5 days ago)	Automated web attack from 170.64.135.180 against our web server. 2 malicious requests on 2026-08-23 ... show more Automated web attack from 170.64.135.180 against our web server. 2 malicious requests on 2026-08-23 (UTC), denied with HTTP 403. Classified as: exposure of .git repository data. Requests targeted the bare server IP, not a host name (untargeted range scanning). Sample request: GET /.git/config Probed for: .git repository files. User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36". AS14061 DIGITALOCEAN-ASN. One of 21 hosts sending a byte-identical User-Agent to us; 130 of the 210 host pairs among them requested at least one identical path. From this address: /.git/config. All timestamps are UTC. show less	Web App Attack Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-23 11:37:51 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 170.64.135.180 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.135.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 07:37:45.679011 2026] [security2:error] [pid 18847:tid 18847] [client 170.64.135.180:60292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "picklebillystayandplay.com"] [uri "/.git/config"] [unique_id "aorbiczj1YGRRCjzrVocvwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇱 130.12.209.134

🇲🇩 77.89.214.250

🇦🇷 200.105.94.68

🇧🇷 179.127.166.34

🇮🇳 103.241.45.120

🇮🇩 103.165.233.140

🇺🇸 97.74.236.4

🇷🇺 92.255.107.12

🇵🇱 85.194.240.198

🇩🇪 85.190.97.140

🇺🇸 54.89.101.241

🇨🇳 14.103.118.177

🇰🇿 217.196.26.102

🇦🇷 200.105.94.126

🇬🇧 193.8.186.31

🇨🇱 190.171.165.205

🇨🇱 186.189.92.37

🇸🇪 171.25.158.68

🇨🇳 125.77.73.145

🇺🇸 104.28.228.78