JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.136.13

170.64.136.13 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 70%: ?

70%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.136.13

Whois 170.64.136.13

IP Abuse Reports for 170.64.136.13:

This IP address has been reported a total of 20 times from 15 distinct sources. 170.64.136.13 was first reported on March 10th 2026, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FD-IX	2026-10-17 16:29:03 (43 minutes ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
Anonymous	2026-10-17 15:07:50 (2 hours ago)	Web application attack detected.	Web App Attack
Anonymous	2026-10-17 14:05:09 (3 hours ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (60/60 min)'; Requests=60	Port Scan
🇩🇪 raph	2026-10-17 13:57:20 (3 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 13:03:50 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 09:03:47.344794 2026] [security2:error] [pid 27167:tid 27167] [client 170.64.136.13:53244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shopauto.cbmanufacturing.com"] [uri "/.git/config"] [unique_id "atNyMyu0MnV6J7QhSjOH4QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 12:21:32 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 08:21:28.476930 2026] [security2:error] [pid 3276:tid 3276] [client 170.64.136.13:40170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shop.aguasolar.com"] [uri "/.git/config"] [unique_id "atNoSP9AHs9Yj2HNuO2YXwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-17 11:52:08 (5 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-10-17 11:12:56 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 07:12:51.083356 2026] [security2:error] [pid 3304:tid 3304] [client 170.64.136.13:39056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shofarmusic.com"] [uri "/.git/config"] [unique_id "atNYMz0t-1_SxM01zBDaVwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 09:27:18 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:27:13.010756 2026] [security2:error] [pid 4069:tid 4069] [client 170.64.136.13:44300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shirtzz.com"] [uri "/.git/config"] [unique_id "atM_ce09ICnwBjWt3sNn-QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-17 09:16:53 (7 hours ago)	XSS Attempt	Hacking
Anonymous	2026-10-17 08:40:02 (8 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 08:26:55 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 04:26:52.435562 2026] [security2:error] [pid 11282:tid 11282] [client 170.64.136.13:52228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shinynew.com"] [uri "/.git/config"] [unique_id "atMxTIbejev8bd5g_fpMSAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 creechy	2026-10-17 08:21:05 (8 hours ago)	170.64.136.13 - - [17/Oct/2026:01:20:58 -0700] "GET /.git/config HTTP/1.1" 404 767 "-" "Mozilla/5.0 ... show more 170.64.136.13 - - [17/Oct/2026:01:20:58 -0700] "GET /.git/config HTTP/1.1" 404 767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" ... show less	Hacking Bad Web Bot
🇺🇸 SX Communications	2026-10-17 08:15:50 (8 hours ago)	Blocked abusive HTTP application-layer DoS / botnet traffic from 170.64.136.13: traffic from this ad ... show more Blocked abusive HTTP application-layer DoS / botnet traffic from 170.64.136.13: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 TPI-Abuse	2026-10-16 19:41:25 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.136.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 15:41:16.955056 2026] [security2:error] [pid 4304:tid 4304] [client 170.64.136.13:53218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sites.caribbeancoders.com"] [uri "/.git/config"] [unique_id "atJ93D5whP-qBENb6ymrIAAAADM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 200.138.46.7

🇵🇱 166.88.60.140

🇩🇪 139.59.134.209

🇨🇳 106.63.26.8

🇨🇳 58.220.10.131

🇸🇬 43.173.180.218

🇧🇷 34.95.140.166

🇺🇸 20.65.146.34

🇮🇳 4.224.40.94

🇨🇳 221.228.203.3

🇷🇺 151.252.84.225

🇻🇳 125.212.251.7

🇱🇹 62.60.134.212

🇯🇵 34.180.122.99

🇺🇸 66.132.186.215

🇩🇪 36.255.97.232

🇺🇸 35.235.121.35

🇺🇸 34.186.113.100

🇺🇸 20.168.123.103

🇺🇸 3.151.116.231