JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

170.64.200.248

Recent Activity

Abuse confidence score ?

12% Caution

55 reports

26 reporters · latest 1 day ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 170.64.200.248

Export CSV

This IP address has been reported a total of 55 times from 26 distinct sources. 170.64.200.248 was first reported on September 5th 2023, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: United Kingdom of Great Britain and Northern Ireland with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Port Scan 1 time; Web App Attack 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-10-18 08:17:13 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 sandra361	2026-09-23 09:39:49 (3 weeks ago)	Port scan detected: 15 attempts across 1 port (5010). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=170.6 ... show more Port scan detected: 15 attempts across 1 port (5010). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=170.64.200.248 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=53295 DF PROTO=TCP SPT=24550 DPT=5010 WINDOW=64240 RES=0x00 ACK RST URGP=0 show less	Port Scan
🇹🇷 rtbh.com.tr	2026-02-12 04:11:31 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-10 20:11:30 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2026-02-10 06:13:39 (8 months ago)	8 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking
🇳🇱 homeshowdomain.nl	2026-02-09 22:59:47 (8 months ago)	Auto-ban: >3000 req/min op 2026-02-09	Hacking Web App Attack SSH
🇭🇺 bcsaba	2026-02-09 20:41:24 (8 months ago)	Probing for .git: 170.64.200.248 - - [09/Feb/2026:21:41:23 +0100] "GET /.git/config HTTP/1.1" 403 54 ... show more Probing for .git: 170.64.200.248 - - [09/Feb/2026:21:41:23 +0100] "GET /.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇩🇪 ghostwarriors	2026-02-09 20:20:27 (8 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RH5	2026-02-09 18:40:54 (8 months ago)	Restricted URL probing (/.git) (UTC 2026-02-09 18:40)	Web App Attack
🇩🇪 David Ferneding	2026-02-09 18:01:28 (8 months ago)	Blocked by UFW (TCP on 80) Source port: 58972 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 58972 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 170.64.200.248) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 17:44:36 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 170.64.200.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.200.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:44:29.023678 2026] [security2:error] [pid 22673:tid 22673] [client 170.64.200.248:40150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crazypencil.com"] [uri "/.git/config"] [unique_id "aYoc_cO2en4GD4j3CrgUZAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 bcsaba	2026-02-09 17:20:02 (8 months ago)	Probing for .git: 170.64.200.248 - - [09/Feb/2026:18:20:01 +0100] "GET /.git/config HTTP/1.1" 403 54 ... show more Probing for .git: 170.64.200.248 - - [09/Feb/2026:18:20:01 +0100] "GET /.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 15:24:35 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 170.64.200.248 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.200.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 10:24:31.229266 2026] [security2:error] [pid 22545:tid 22545] [client 170.64.200.248:58368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "csme-eprr.com"] [uri "/.git/config"] [unique_id "aYn8L_8tcwkBHnM07eicZAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 bcsaba	2026-02-09 14:15:50 (8 months ago)	Probing for .git: 170.64.200.248 - - [09/Feb/2026:15:15:48 +0100] "GET /.git/config HTTP/1.1" 403 54 ... show more Probing for .git: 170.64.200.248 - - [09/Feb/2026:15:15:48 +0100] "GET /.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Web App Attack
🇬🇧 poundawebsiteltd	2026-02-09 14:04:13 (8 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 170.64.200.248 - - [09/Feb/2026: ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 170.64.200.248 - - [09/Feb/2026:14:04:12 +0000] GET /.git/config HTTP/1.1 403 2901 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Web App Attack

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 98.32.210.78

🇺🇸 91.230.168.196

🇦🇷 45.239.114.111

🇬🇧 193.163.125.183

🇫🇷 169.58.111.93

🇺🇸 147.182.182.42

🇵🇰 124.29.214.170

🇺🇦 91.196.97.156

🇵🇱 82.47.63.33

🇺🇸 50.6.200.124

🇺🇸 45.8.19.4

🇺🇸 201.3.239.18

🇺🇸 163.61.236.119

🇸🇬 158.178.224.239

🇹🇭 118.194.251.37

🇧🇩 103.111.34.168

🇬🇧 86.38.187.171

🇫🇷 85.217.140.20

🇵🇱 77.83.101.41

🇺🇸 67.205.137.151