JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.200.173

170.64.200.173 was found in our database!

This IP was reported 217 times. Confidence of Abuse is 86%: ?

86%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.200.173

Whois 170.64.200.173

IP Abuse Reports for 170.64.200.173:

This IP address has been reported a total of 217 times from 117 distinct sources. 170.64.200.173 was first reported on December 18th 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-07-02 05:15:00 (5 hours ago)	4 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
Anonymous	2026-07-01 19:24:51 (14 hours ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇺🇦 Olexiy Backend	2026-07-01 16:32:18 (17 hours ago)	170.64.200.173 ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 16:30:10 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 12:30:04.499479 2026] [security2:error] [pid 13279:tid 13279] [client 170.64.200.173:44830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gsrsv.org"] [uri "/.git/config"] [unique_id "akVAjNhm1gICzVZQj-ctOgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 convos	2026-07-01 15:30:45 (18 hours ago)	HONEYPOT .git probe on hq.it-solutionsusa.com	Port Scan Web App Attack
🇮🇹 abuseiphack	2026-07-01 12:49:15 (21 hours ago)	Automatic report for brute force attack	Web App Attack
🇺🇸 Charlesiv	2026-07-01 12:02:43 (22 hours ago)	Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK ASN: 14061 (DigitalOcean, LLC ... show more Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK ASN: 14061 (DigitalOcean, LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-07-01T11:36:28Z Ray ID: a1451cfac97ea440 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-01 09:59:57 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 05:59:51.015938 2026] [security2:error] [pid 8610:tid 8610] [client 170.64.200.173:43966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "i-med.com"] [uri "/.git/config"] [unique_id "akTlF7QGIRNlf8NRMxU2UQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-07-01 09:09:02 (1 day ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,mx01,mx02,mx03,wa ... show more Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,mx01,mx02,mx03,wa01] show less	Bad Web Bot Web App Attack
🇨🇭 Jerome Blaser	2026-07-01 07:59:23 (1 day ago)	Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked ... show more Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-07-01 07:59 UTC. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 07:53:36 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 03:53:30.518817 2026] [security2:error] [pid 3926:tid 3926] [client 170.64.200.173:35208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anythingsoldworldwide.com"] [uri "/.git/config"] [unique_id "akTHehdoWgaYOHWkOv3VDAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 07:22:11 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 03:22:04.323391 2026] [security2:error] [pid 19720:tid 19720] [client 170.64.200.173:36690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jtagulator.com"] [uri "/.git/config"] [unique_id "akTAHIl-RvR82Lusu0tUogAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-07-01 07:07:01 (1 day ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 05:59:08 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:59:02.240918 2026] [security2:error] [pid 31181:tid 31181] [client 170.64.200.173:35460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cvoguemag.com"] [uri "/.git/config"] [unique_id "akSspmGhPcVXG7BlMU_wYgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 05:23:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.200.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:23:25.700170 2026] [security2:error] [pid 25851:tid 25851] [client 170.64.200.173:52850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "faw.us"] [uri "/.git/config"] [unique_id "akSkTcNpgkvZwgcD7eti0QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 217 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.154.42.110

🇰🇷 210.90.155.178

🇩🇪 167.94.146.43

🇬🇧 104.143.235.206

🇷🇴 92.118.39.77

🇮🇩 36.69.153.77

🇨🇳 27.24.141.119

🇺🇸 20.14.89.155

🇪🇬 197.44.15.210

🇨🇦 149.56.241.206

🇩🇪 104.23.239.17

🇰🇷 49.173.65.19

🇧🇷 191.6.25.239

🇨🇳 180.171.77.18

🇨🇳 180.153.236.110

🇧🇷 177.11.196.84

🇮🇳 125.17.46.126

🇮🇩 124.40.252.3

🇭🇰 121.202.206.76

🇺🇸 104.232.79.58