AbuseIPDB » 170.64.147.74

170.64.147.74 was found in our database!

This IP was reported 1,637 times. Confidence of Abuse is 34%: ?

34%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 170.64.147.74

Whois 170.64.147.74

IP Abuse Reports for 170.64.147.74:

This IP address has been reported a total of 1,637 times from 340 distinct sources. 170.64.147.74 was first reported on August 10th 2023, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
tecnicorioja	2024-12-09 23:02:18 (1 month ago)	(Mod_security) [09/Dec/2024:22:29:26.404400	Brute-Force Bad Web Bot Web App Attack
Mk R	2024-12-09 22:43:47 (1 month ago)	170.64.147.74 - - [09/Dec/2024:22:43:45 +0000] "GET /.git/config HTTP/1.1" 404 197 "-" "Mozilla/5.0 ... show more170.64.147.74 - - [09/Dec/2024:22:43:45 +0000] "GET /.git/config HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.147.74 - - [09/Dec/2024:22:43:45 +0000] "GET /.env HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.147.74 - - [09/Dec/2024:22:43:46 +0000] "GET /.git HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.147.74 - - [09/Dec/2024:22:43:46 +0000] "GET /config.ini HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.147.74 - - [09/Dec/2024:22:43:46 +0000] "GET /db_config.php HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 170.64.147.74 - - [09/Dec/2024:22:43:4 ... show less	FTP Brute-Force
Roderic	2024-12-09 19:33:36 (1 month ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 170.64.147.74 (AU/Aust ... show more(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 170.64.147.74 (AU/Australia/-) show less	Port Scan
serverobot.de	2024-12-09 14:38:15 (1 month ago)	170.64.147.74 - - [09/Dec/2024:15:38:14 +0100] "GET /env.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11 ... show more170.64.147.74 - - [09/Dec/2024:15:38:14 +0100] "GET /env.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
phoenix1jl96	2024-12-09 13:40:19 (1 month ago)	[Mon Dec 09 13:40:04.596158 2024] [proxy_fcgi:error] [pid 779217:tid 779217] [client 170.64.147.74:5 ... show more[Mon Dec 09 13:40:04.596158 2024] [proxy_fcgi:error] [pid 779217:tid 779217] [client 170.64.147.74:56194] AH01071: Got error 'Primary script unknown' [Mon Dec 09 13:40:05.184920 2024] [proxy_fcgi:error] [pid 769244:tid 769244] [client 170.64.147.74:56208] AH01071: Got error 'Primary script unknown' [Mon Dec 09 13:40:08.736561 2024] [proxy_fcgi:error] [pid 769244:tid 769244] [client 170.64.147.74:56248] AH01071: Got error 'Primary script unknown' [Mon Dec 09 13:40:15.178900 2024] [proxy_fcgi:error] [pid 771508:tid 771508] [client 170.64.147.74:48036] AH01071: Got error 'Primary script unknown' [Mon Dec 09 13:40:15.767020 2024] [proxy_fcgi:error] [pid 779217:tid 779217] [client 170.64.147.74:48048] AH01071: Got error 'Primary script unknown' ... show less	DNS Compromise DNS Poisoning DDoS Attack Web Spam Port Scan Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
ne1for23	2024-12-09 07:44:06 (1 month ago)	Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" ... show moreAttempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution. 170.64.147.74 - - [09/Dec/2024:07:44:06 +0000] "GET / HTTP/1.1" 403 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" show less	Hacking
webbfabriken	2024-12-09 03:58:29 (1 month ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
LRNP	2024-12-09 03:48:21 (1 month ago)	_:80 170.64.147.74 - - [09/Dec/2024:03:48:20 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X ... show more_:80 170.64.147.74 - - [09/Dec/2024:03:48:20 +0000] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2024-12-09 02:35:03 (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
ApresNousLaFaillite	2024-12-09 00:13:16 (1 month ago)	Bad user agents ignoring web crawling rules Draining bandwidth	Bad Web Bot Web App Attack
Mainpine	2024-12-08 23:00:26 (1 month ago)	probing for vulnerable web apps	Web App Attack
anon333	2024-12-08 20:33:07 (1 month ago)	Hacker syslog review 1733689987	Hacking
SilverZippo	2024-12-08 13:03:34 (1 month ago)	Web App Attack	Web App Attack
ManagedStack	2023-09-09 20:48:26 (1 year ago)	Unauthorized path/IP Access (full log not revealed as it contains sensitive data)	Hacking Web App Attack
CRSSkynet	2023-08-31 23:57:31 (1 year ago)	Aug 13 22:34:32 DVSwitch-GM0WUR sshd[11572]: Failed password for root from 170.64.147.74 port 59830 ... show moreAug 13 22:34:32 DVSwitch-GM0WUR sshd[11572]: Failed password for root from 170.64.147.74 port 59830 ssh2 Aug 13 22:39:58 DVSwitch-GM0WUR sshd[12659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.147.74 ... show less	Brute-Force SSH