JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.149.12

170.64.149.12 was found in our database!

This IP was reported 376 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.149.12

Whois 170.64.149.12

IP Abuse Reports for 170.64.149.12:

This IP address has been reported a total of 376 times from 205 distinct sources. 170.64.149.12 was first reported on February 15th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 JCB	2025-05-23 14:59:00 (1 year ago)	170.64.149.12 - - [23/May/2025:07:27:31 +0300] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Window ... show more 170.64.149.12 - - [23/May/2025:07:27:31 +0300] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇷 diego	2025-05-23 04:43:53 (1 year ago)	[probe-44-49] 2025-05-23 04:27:56, Client: 170.64.149.12, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-44-49] 2025-05-23 04:27:56, Client: 170.64.149.12, Protocol: 6, Unauthorized activity to HTTP: GET /.env show less	Web App Attack
🇺🇸 TPI-Abuse	2025-05-23 04:23:28 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 170.64.149.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.149.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 23 00:23:25.741567 2025] [security2:error] [pid 2625913:tid 2625913] [client 170.64.149.12:36010] [client 170.64.149.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.182"] [uri "/.env"] [unique_id "aC_4PRU-xCVhOfQbIl_VRQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2025-05-23 04:04:13 (1 year ago)	tcp/443 (5 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2025-05-23 04:01:22 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 170.64.149.12 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.149.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 23 00:01:19.593820 2025] [security2:error] [pid 138496:tid 138496] [client 170.64.149.12:49250] [client 170.64.149.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.12"] [uri "/.env"] [unique_id "aC_zDwvmRVLBR9svvixv5AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-04-11 06:42:23 (1 year ago)	Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇪🇸 librebit	2025-01-12 00:51:50 (1 year ago)	Brute force	Brute-Force
🇺🇸 BSG Webmaster	2025-01-11 08:30:07 (1 year ago)	170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 31B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇺🇸 BSG Webmaster	2025-01-10 08:30:04 (1 year ago)	170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 31B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇺🇸 Brent Wadleigh	2025-01-09 17:50:46 (1 year ago)	IP attempted SSH bruteforce on port 22. Detected and banned by CrowdSec.	Brute-Force SSH
🇺🇸 BSG Webmaster	2025-01-09 08:30:03 (1 year ago)	170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 31B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇺🇸 BSG Webmaster	2025-01-08 08:30:02 (1 year ago)	170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 31B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇺🇸 BSG Webmaster	2025-01-07 08:30:03 (1 year ago)	170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 170.64.149.12 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 20s. Total bytes sent by tarpit: 31B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇩🇪 Grizzlytools	2025-01-07 06:30:23 (1 year ago)	Kingcopy(AI-IDS)RouterOS: Portscanner detected.	Port Scan
🇳🇱 ATV	2025-01-07 03:17:14 (1 year ago)	Unsolicited connection attempts to port 22	Hacking SSH

Showing 1 to 15 of 376 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.243.153.55

🇷🇴 92.118.39.214

🇫🇷 51.91.96.79

🇳🇱 45.148.10.21

🇸🇦 178.73.95.132

🇨🇿 149.6.24.245

🇨🇳 116.179.33.78

🇺🇸 52.204.174.139

🇹🇼 34.80.99.168

🇩🇪 167.94.146.71

🇷🇺 165.154.179.62

🇺🇸 159.203.108.2

🇰🇷 115.178.75.242

🇮🇷 85.198.19.251

🇩🇪 69.5.169.150

🇺🇸 20.29.29.221

🇨🇳 223.78.81.35

🇨🇷 186.32.220.233

🇵🇰 103.120.116.162

🇲🇰 92.53.15.223