JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.199.140

170.64.199.140 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.199.140

Whois 170.64.199.140

IP Abuse Reports for 170.64.199.140:

This IP address has been reported a total of 40 times from 21 distinct sources. 170.64.199.140 was first reported on June 30th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-01 21:59:11 (13 hours ago)	Auto-ban: >3000 req/min op 2026-07-01	Web App Attack SSH Hacking
🇨🇴 adalbertoreyes.org	2026-07-01 20:23:06 (15 hours ago)	CategoryPortScan	Port Scan
🇬🇧 foxxelabs	2026-07-01 16:46:31 (18 hours ago)	Automated report from FoxxeLabs Sentinel. Path probed: /.git/config \| Project: anseo \| Reason(s): Kn ... show more Automated report from FoxxeLabs Sentinel. Path probed: /.git/config \| Project: anseo \| Reason(s): Known exploit path: /.git/config; AbuseIPDB score: 100/100 \| User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/5 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 13:17:53 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.199.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.199.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 09:17:46.372762 2026] [security2:error] [pid 12413:tid 12413] [client 170.64.199.140:58218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "expatcolombia.net"] [uri "/.git/config"] [unique_id "akUTehRWAYuGHQVHc5LougAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-01 13:05:04 (22 hours ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
Anonymous	2026-07-01 12:08:04 (23 hours ago)	170.64.199.140 - - [01/Jul/2026:14:08:03 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ... show more 170.64.199.140 - - [01/Jul/2026:14:08:03 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇩🇪 sdos.es	2026-07-01 11:45:53 (23 hours ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
🇩🇪 Blexyel	2026-07-01 10:05:08 (1 day ago)	170.64.199.140 - - [01/Jul/2026:12:05:07 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ... show more 170.64.199.140 - - [01/Jul/2026:12:05:07 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "pingusmc.org" ... show less	Brute-Force Web App Attack
🇩🇪 ut-addicted.com	2026-07-01 09:50:39 (1 day ago)	\[Wed Jul 01 11:50:38.159206 2026\] \[:error\] \[pid 16703:tid 139785853191936\] \[client 170.64.199 ... show more \[Wed Jul 01 11:50:38.159206 2026\] \[:error\] \[pid 16703:tid 139785853191936\] \[client 170.64.199.140:45668\] \[client 170.64.199.140\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/.git/config"\] \[unique_id "akTi7sqVQvLWkOBevqQz0QAAAMU"\] show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 09:46:33 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 170.64.199.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.199.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 05:46:29.429707 2026] [security2:error] [pid 15017:tid 15017] [client 170.64.199.140:56738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolcustomweddingproducts.com"] [uri "/.git/config"] [unique_id "akTh9fLd678Hj2Gj0M8pKQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-01 07:14:00 (1 day ago)	170.64.199.140 - - [01/Jul/2026:15:14:00 +0800] "GET /.git/config HTTP/1.1" 301 238 "-" "Mozilla/5.0 ... show more 170.64.199.140 - - [01/Jul/2026:15:14:00 +0800] "GET /.git/config HTTP/1.1" 301 238 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 06:10:34 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 170.64.199.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.199.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 02:10:25.806925 2026] [security2:error] [pid 32363:tid 32363] [client 170.64.199.140:40312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chickiesbeef.com"] [uri "/.git/config"] [unique_id "akSvURxDKiEemFM2u1TR8AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 05:45:48 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 170.64.199.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.199.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:45:42.909869 2026] [security2:error] [pid 10867:tid 10867] [client 170.64.199.140:45456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ficciones.com"] [uri "/.git/config"] [unique_id "akSphjESVKysiXBfoOiKawAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-07-01 05:39:34 (1 day ago)	[ISILIA Protection v2.1] Tentative d'accès: /.git/config \| Pays: AU \| UA: Mozilla/5.0 (X11; Linux x8 ... show more [ISILIA Protection v2.1] Tentative d'accès: /.git/config \| Pays: AU \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/5 show less	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-07-01 05:19:56 (1 day ago)	Try to access /.git/config	Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:3ff:8::

🇰🇷 211.185.23.242

🇩🇪 207.154.221.51

🇳🇱 206.189.100.42

🇳🇱 195.178.110.228

🇫🇷 185.202.239.1

🇨🇦 170.9.40.164

🇳🇱 91.92.42.200

🇫🇷 90.11.242.231

🇩🇪 80.155.140.197

🇺🇸 76.92.81.195

🇨🇳 42.51.44.110

🇺🇸 20.98.165.171

🇺🇸 2a03:2880:10ff:58::

🇺🇸 2a03:2880:10ff:40::

🇷🇺 217.150.37.249

🇧🇷 205.164.249.69

🇺🇸 204.48.27.3

🇨🇱 170.247.137.104

🇺🇸 165.154.206.223