JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.197.20

170.64.197.20 was found in our database!

This IP was reported 133 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.197.20

Whois 170.64.197.20

IP Abuse Reports for 170.64.197.20:

This IP address has been reported a total of 133 times from 84 distinct sources. 170.64.197.20 was first reported on March 5th 2024, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-07-02 15:00:16 (1 minute ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 170.64.197.20 108.162.249.92 - - [02/Jul/2026:12:00 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 170.64.197.20 108.162.249.92 - - [02/Jul/2026:12:00:11 -0300] "GET /.git/config HTTP/1.1" 404 18193 show less	Bad Web Bot
🇮🇪 AutosOnShow	2026-07-02 13:57:05 (1 hour ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-07-02 13:56:12.978 \|	Web App Attack
🇨🇭 4server	2026-07-02 11:35:07 (3 hours ago)	[ThuJul0213:35:03.8315552026][security2:error][pid766354:tid766926][client170.64.197.20:0]ModSecurit ... show more [ThuJul0213:35:03.8315552026][security2:error][pid766354:tid766926][client170.64.197.20:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"edomustech.com\"][uri\"/.git/config\"][unique_id\"akZM54pJSak71P3mj_lbkgAAAVY\"] show less	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-07-02 11:18:14 (3 hours ago)	[Thu Jul 02 21:18:13.384585 2026] [security2:error] [pid 477620] [client 170.64.197.20:48030] [clien ... show more [Thu Jul 02 21:18:13.384585 2026] [security2:error] [pid 477620] [client 170.64.197.20:48030] [client 170.64.197.20] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/.git/config"] [unique_id "akZI9UtZBM9ZJzBdPT0XOAAAAAQ"] ... show less	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-02 10:31:37 (4 hours ago)	[Thu Jul 02 20:31:36.331045 2026] [security2:error] [pid 473402] [client 170.64.197.20:39630] [clien ... show more [Thu Jul 02 20:31:36.331045 2026] [security2:error] [pid 473402] [client 170.64.197.20:39630] [client 170.64.197.20] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "furst.com.au"] [uri "/.git/config"] [unique_id "akY-CLHzg9Dw6Ex7tXO4YAAAAAI"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 09:40:10 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.197.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.197.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:40:03.390678 2026] [security2:error] [pid 11294:tid 11294] [client 170.64.197.20:57328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arcdesign.me"] [uri "/.git/config"] [unique_id "akYx86Q_s6AMzH-Pzg1AJQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-02 08:52:04 (6 hours ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇩🇪 Ba-Yu	2026-07-02 08:51:20 (6 hours ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 Hugopvigo	2026-07-02 08:36:37 (6 hours ago)	travel.suop.es:80 170.64.197.20 - - [02/Jul/2026:10:36:36 +0200] "GET /.git/config HTTP/1.1" 301 592 ... show more travel.suop.es:80 170.64.197.20 - - [02/Jul/2026:10:36:36 +0200] "GET /.git/config HTTP/1.1" 301 592 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Brute-Force Web App Attack SSH
🇩🇪 4server	2026-07-02 07:18:21 (7 hours ago)	[ThuJul0209:18:19.4021652026][security2:error][pid2655160:tid2655175][client170.64.197.20:0]ModSecur ... show more [ThuJul0209:18:19.4021652026][security2:error][pid2655160:tid2655175][client170.64.197.20:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"beyondsecurity.ch\"][uri\"/.git/config\"][unique_id\"akYQuzuILCH-L9qMWhCKlQAAAAQ\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 07:14:05 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.197.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.197.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 03:13:57.350193 2026] [security2:error] [pid 410:tid 410] [client 170.64.197.20:42980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bethanneblue.net"] [uri "/.git/config"] [unique_id "akYPtZYNylZm5nQFy0vM0wAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-07-02 07:04:05 (7 hours ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-07-02 07:03:17.060 \|	Web App Attack
🇩🇪 ghostwarriors	2026-07-02 06:50:14 (8 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 06:40:54 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.197.20 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 170.64.197.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 02:40:50.713098 2026] [security2:error] [pid 16635:tid 16635] [client 170.64.197.20:58430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carlsvoice.com"] [uri "/.git/config"] [unique_id "akYH8vuZPDKHbHZ1mH7ZwwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-07-02 06:37:02 (8 hours ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force

Showing 1 to 15 of 133 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 179.1.239.178

🇨🇳 124.236.108.172

🇻🇳 113.189.200.70

🇮🇷 31.7.66.163

🇸🇪 171.25.158.74

🇨🇳 124.223.112.24

🇭🇰 118.26.36.248

🇸🇬 47.128.96.15

🇺🇸 43.135.135.17

🇻🇳 14.191.229.78

🇨🇳 14.103.120.130

🇨🇳 111.50.143.78

🇮🇳 106.222.215.85

🇵🇰 103.74.20.75

🇳🇱 91.92.40.50

🇰🇪 41.191.229.226

🇯🇴 213.139.40.28

🇲🇦 196.70.243.249

🇬🇹 190.151.130.5

🇻🇳 125.235.229.207