JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

170.64.196.99

Neutral Activity

Abuse confidence score ?

0% Low Risk

68 reports

58 reporters · latest 2 months ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

170.64.196.99 has been reported 68 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 170.64.196.99

This IP address has been reported a total of 68 times from 58 distinct sources. 170.64.196.99 was first reported on February 14th 2024, and the most recent report was 2 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 screwlooseit.com.au	2026-06-29 23:01:56 (2 months ago)	Blocked by CSF 13 firewall - Rule: US/United States/prod-meitnerium-au-syd1-8.do.binaryedge.ninja	Web App Attack
🇵🇱 sefinek.net	2026-06-26 23:51:20 (2 months ago)	Honeypot hit: Empty payload (likely service probe); 3360 [4] TCP Reported by: https://github.com/sef ... show more Honeypot hit: Empty payload (likely service probe); 3360 [4] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇵🇱 sefinek.net	2026-06-26 10:21:36 (2 months ago)	Honeypot hit: Empty payload (likely service probe); 1521 [39] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 1521 [39] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-20 08:06:13 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 170.64.196.99 (prod-meitnerium-au-syd1-8.do.bin ... show more (mod_security) mod_security (id:210492) triggered by 170.64.196.99 (prod-meitnerium-au-syd1-8.do.binaryedge.ninja): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 04:06:06.249237 2026] [security2:error] [pid 3636:tid 3636] [client 170.64.196.99:37360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3pl.com"] [uri "/.env"] [unique_id "ajZJ7hPvcb4vMt8hm76uAAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-24 16:22:07 (4 months ago)	[25/May/2026:02:22:07 +1000] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\x ... show more [25/May/2026:02:22:07 +1000] "\x1b\x84\xd5\xb0]\xf4\xc4\x93\xc50\xc2X\x8c\xda\xb1\xd7\xac\xafn\x1d\xe1\x1e\x1a3*\x85\xb7\x1d'\xb1\xc9k\xbf\xf0\xbc\n" 400 266 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 11:12:45 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 170.64.196.99 (prod-meitnerium-au-syd1-8.do.bin ... show more (mod_security) mod_security (id:210492) triggered by 170.64.196.99 (prod-meitnerium-au-syd1-8.do.binaryedge.ninja): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 07:12:38.566677 2026] [security2:error] [pid 13603:tid 13603] [client 170.64.196.99:47756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.michaels-house.net"] [uri "/.env"] [unique_id "ahLdJkhpV-MkGtmDa7J3UwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 KingHost	2026-03-15 12:26:20 (6 months ago)		Brute-Force
🇨🇿 lp	2026-03-15 11:55:45 (6 months ago)	SSH Brute force: 3 attempts were recorded from 170.64.196.99 2026-03-15T12:44:11+01:00 Connection cl ... show more SSH Brute force: 3 attempts were recorded from 170.64.196.99 2026-03-15T12:44:11+01:00 Connection closed by authenticating user root 170.64.196.99 port 53354 [preauth] 2026-03-15T12:44:07+01:00 Connection closed by authenticating user root 170.64.196.99 port 43634 [preauth] 2026-03-15T12:44:16+01:00 Connection closed by authenticating user root 170.64.196.99 port 57888 [preauth] show less	Brute-Force SSH
🇪🇸 guille-rodriguez	2026-03-15 11:46:41 (6 months ago)	SSH BruteForce detected by Fail2Ban (failures=8, source=VPSPSCZP)	Brute-Force SSH
🇩🇪 LoNET	2026-03-15 11:46:37 (6 months ago)	Report 2148646 with IP 2049810 for SSH brute-force attack by source 3190871 via ssh-honeypot/0.2.1+h ... show more Report 2148646 with IP 2049810 for SSH brute-force attack by source 3190871 via ssh-honeypot/0.2.1+http show less	Brute-Force SSH
🇩🇪 Mr-Money	2026-03-15 11:46:32 (6 months ago)	scenario: crowdsecurity/ssh-bf - events: 6	SSH Brute-Force
🇺🇸 helix	2026-03-15 11:46:24 (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 MPL	2026-03-15 11:43:23 (6 months ago)	tcp/22 (2 or more attempts)	Port Scan
🇮🇪 RoboSOC	2026-03-12 18:19:52 (6 months ago)	Port 22 Scan, PTR: PTR record not found	Port Scan
🇨🇭 amaco	2026-03-12 17:34:33 (6 months ago)	SSH brute-force attempt from 170.64.196.99.	Port Scan Brute-Force SSH

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 165.22.237.140

🇳🇱 51.159.91.169

🇧🇷 45.178.227.0

🇨🇭 209.99.185.98

🇨🇭 209.99.185.81

🇺🇦 194.44.140.62

🇺🇸 191.96.196.91

🇳🇮 190.212.214.146

🇮🇩 157.66.56.84

🇺🇸 149.102.242.7

🇺🇿 144.124.192.145

🇺🇸 107.172.147.223

🇷🇺 93.90.41.12

🇳🇱 91.92.42.193

🇭🇺 82.141.150.164

🇺🇸 35.229.59.102

🇬🇧 35.203.210.70

🇳🇱 34.178.133.79

🇩🇪 8.209.114.67

🇩🇪 213.209.159.84