170.64.207.48
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇦🇺 Australia
- City
- Sydney, New South Wales
Abuse Reports
Total reports
463 from
240 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
|
Web App Attack Bad Web Bot | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| 🇺🇸 RamSet |
[ttn] HTTP-Probe on port 443 (via domain). 4 distinct paths probed in 4s. Sustained 6 req/min, 2 known bad path signatures. Paths: /wp-json/batch/v1
|
Bad Web Bot Web App Attack | |
| 🇺🇸 kosada.com |
Repeated requests for suspicious nonexistent URLs, for example: /wp-json/batch/v1 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36")
|
Web App Attack | |
| 🇵🇱 Budyn |
|
Bad Web Bot Web App Attack | |
| 🇨🇭 Origon |
http-cve-probing - IP: 170.64.207.48 - time="2026-10-14T08:15:21+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 170.64.207.48 (AU/14061) : 4h ban on Ip 170.64.207.48" module=db
|
Web App Attack | |
| 🇺🇸 1gz |
Triggered Cloudflare WAF (firewallCustom) from AU.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-login.php
UA: Mozilla/5.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
|
Bad Web Bot | |
| 🇩🇪 EGP Abuse Dept |
Scanning for web/db/file exploits on greendealduurzamezorg.nl
|
SQL Injection Bad Web Bot Web App Attack | |
| 🇵🇱 Budyn |
|
Bad Web Bot Web App Attack | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/170.64.207.48
2025-09-03 00:11:53 ["uname -s -v -n -r -m"]
|
SSH | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/0
|
Brute-Force | |
| 🇩🇪 Grizzlytools |
Kingcopy(AI-IDS)RouterOS: Portscanner detected.
|
Port Scan | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/22
|
Brute-Force | |
| 🇫🇷 tecnicorioja |
Failed password for root Sep 02 22:26:16 port 39452
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown