JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

170.64.207.156

Neutral Activity

Abuse Confidence Score

0% Low Risk

22 reports

16 reporters · latest 1 month ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇦🇺 Australia
City: Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

22 from 16 distinct reporters

First reported

December 6th 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 1

Most common categories Web App Attack 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-16 21:00:57 UTC · (1 month ago)		Web App Attack
🇬🇧 consul.to	2026-08-17 18:30:54 UTC · (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-07-18 08:20:51 UTC · (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇹🇷 rtbh.com.tr	2025-12-08 20:10:20 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 mnsf	2025-12-08 02:05:10 UTC · (11 months ago)	Too many Status 40X (17)	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-12-07 20:10:19 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 oh.mg	2025-12-07 13:04:51 UTC · (11 months ago)	[Sun Dec 07 14:03:43.051738 2025] [security2:error] [pid 677876:tid 677890] [client 170.64.207.156:49540] [client 170.64.207.156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/ ... show more [Sun Dec 07 14:03:43.051738 2025] [security2:error] [pid 677876:tid 677890] [client 170.64.207.156:49540] [client 170.64.207.156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "darksatellite.com"] [uri "/.git/config"] [unique_id "aTV7L_Utsxnfues1h62msAAAAEw"] [Sun Dec 07 14:04:51.034482 2025] [security2:error] [pid 674233:tid 674238] [client 170.64.207.156:45044] [client 170.64.207.156] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-d ... show less	Bad Web Bot Web App Attack
Anonymous	2025-12-07 06:06:01 UTC · (11 months ago)	Trying to access config files	Web App Attack
🇳🇱 jjnxpct	2025-12-07 04:54:56 UTC · (11 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config]	Hacking Web App Attack
🇫🇷 masterguru	2025-12-07 02:07:47 UTC · (11 months ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 01:26:44 UTC · (11 months ago)	(mod_security) mod_security (id:210492) triggered by 170.64.207.156 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 20:26:40.312699 2025] [security2:error] [pid 28181:tid 28181] [client 170.64.207.156:54830] ... show more (mod_security) mod_security (id:210492) triggered by 170.64.207.156 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 20:26:40.312699 2025] [security2:error] [pid 28181:tid 28181] [client 170.64.207.156:54830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cspminc.com"] [uri "/.git/config"] [unique_id "aTTX0OHvWIeK2ToiSJA7rQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-12-07 01:05:26 UTC · (11 months ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇭🇺 bcsaba	2025-12-06 23:46:27 UTC · (11 months ago)	Probing for .git: 170.64.207.156 - - [07/Dec/2025:00:46:24 +0100] "GET /.git/config HTTP/1.1" 403 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"	Web App Attack
🇫🇷 tecnicorioja	2025-12-06 23:01:04 UTC · (11 months ago)	(Mod_security)	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2025-12-06 22:56:02 UTC · (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 This report w ... show more Triggered Cloudflare WAF (firewallCustom) from AU. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.150.114

🇧🇩 103.150.255.9

🇰🇷 218.234.186.2

🇨🇳 218.17.217.141

🇺🇸 162.216.149.90

🇧🇷 131.221.13.200

🇧🇩 116.212.185.147

🇩🇪 102.220.163.79

🇹🇷 95.65.183.104

🇻🇪 82.86.133.90

🇳🇱 77.239.124.65

🇺🇸 66.132.172.105

🇳🇱 45.144.212.124

🇧🇪 35.210.9.180

🇰🇷 218.149.235.152

🇬🇧 217.146.80.114

🇳🇱 204.76.203.212

🇺🇿 198.163.194.231

🇮🇶 150.228.105.39

🇺🇸 147.182.160.215