JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.137.20

170.64.137.20 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.137.20

Whois 170.64.137.20

IP Abuse Reports for 170.64.137.20:

This IP address has been reported a total of 44 times from 26 distinct sources. 170.64.137.20 was first reported on May 22nd 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-03 21:59:05 (23 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-02. show less	Web App Attack SSH Hacking
🇬🇧 openstrike.co.uk	2026-07-03 05:15:22 (1 day ago)	3 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇩🇪 ghostwarriors	2026-07-03 02:23:45 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-02 21:59:52 (1 day ago)	Auto-ban: >3000 req/min op 2026-07-02	Web App Attack SSH Hacking
🇪🇸 elcruzado.es	2026-07-02 21:49:24 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 170.64.137.20 (AU/Australia/-)	SQL Injection
Anonymous	2026-07-02 20:35:11 (2 days ago)	170.64.137.20 - - [02/Jul/2026:04:31:38 +0000] "GET /.git/config HTTP/2.0" 404 12893 "-" "Mozilla/5. ... show more 170.64.137.20 - - [02/Jul/2026:04:31:38 +0000] "GET /.git/config HTTP/2.0" 404 12893 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.137.20 - - [02/Jul/2026:08:02:45 +0000] "GET /.git/config HTTP/2.0" 404 12892 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.137.20 - - [02/Jul/2026:17:56:53 +0000] "GET /.git/config HTTP/2.0" 404 12891 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.137.20 - - [02/Jul/2026:19:14:56 +0000] "GET /.git/config HTTP/2.0" 404 12891 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.137.20 - - [02/Jul/2026:20:35:08 +0000] "GET /.git/config HTTP/2.0" 404 12891 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Brute-Force Web App Attack
Anonymous	2026-07-02 16:54:55 (2 days ago)	fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.git/c ... show more fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.git/config"] show less	Bad Web Bot Web App Attack
🇧🇪 madeit	2026-07-02 14:54:39 (2 days ago)		Web App Attack
🇳🇱 enpepet	2026-07-02 12:05:30 (2 days ago)	GENERAL: parametres: [url:git=] UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like G ... show more GENERAL: parametres: [url:git=] UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 URL:/.git/config show less	Port Scan Hacking Brute-Force Bad Web Bot
🇷🇴 INTEQ	2026-07-02 11:49:31 (2 days ago)	Web attack from 170.64.137.20	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 11:16:59 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 170.64.137.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.137.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 07:16:56.280994 2026] [security2:error] [pid 20883:tid 20883] [client 170.64.137.20:57086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graydortmotors.com"] [uri "/.git/config"] [unique_id "akZIqDuDpEsUIhT5Nq3KfwAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 07:37:36 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 170.64.137.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.137.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 03:37:32.574702 2026] [security2:error] [pid 10356:tid 10356] [client 170.64.137.20:52634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgewmartin.com"] [uri "/.git/config"] [unique_id "akYVPJ89R6vbgcafFvrjQgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-02 07:25:22 (2 days ago)	Web vulnerability probing: /.git/config	Web App Attack
🇨🇭 4server	2026-07-02 07:00:47 (2 days ago)	[ThuJul0209:00:44.1607792026][security2:error][pid3965400:tid3966072][client170.64.137.20:0]ModSecur ... show more [ThuJul0209:00:44.1607792026][security2:error][pid3965400:tid3966072][client170.64.137.20:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"edilmarra.ch\"][uri\"/.git/config\"][unique_id\"akYMnCZ2vFmMUAv-RJ2xqQAAAJg\"] show less	Hacking Web App Attack
Anonymous	2026-07-02 06:50:06 (2 days ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.211.34

🇷🇺 2a09:bac1:61e0:3380::4f:b0

🇩🇪 164.92.165.237

🇺🇸 162.216.150.232

🇳🇬 105.127.14.27

🇷🇺 95.165.25.233

🇸🇬 172.253.236.217

🇰🇷 121.78.28.63

🇨🇳 106.37.72.234

🇫🇷 62.210.142.148

🇧🇴 190.129.122.12

🇲🇽 187.216.224.85

🇸🇬 172.217.44.220

🇷🇺 78.139.212.158

🇱🇹 45.227.254.170

🇯🇵 43.153.185.56

🇺🇸 205.210.31.84

🇺🇸 172.86.119.231

🇰🇷 125.142.37.91

🇮🇳 103.47.151.208