JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

170.64.207.88

Neutral Activity

Abuse Confidence Score

0% Low Risk

43 reports

31 reporters · latest 1 month ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇦🇺 Australia
City: Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

43 from 31 distinct reporters

First reported

March 7th 2025

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 1

Most common categories DNS Compromise 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-12 08:06:14 UTC · (1 month ago)	DNS AXFR Attempt	DNS Compromise
Anonymous	2025-10-11 09:35:10 UTC · (1 year ago)	[10/Oct/2025:01:18:59 -0400] - [10/Oct/2025:14:29:30 -0400] Developer env. probe	Hacking
🇪🇸 Gem	2025-10-10 22:21:46 UTC · (1 year ago)	Unauthorized web scan.	Web App Attack
🇩🇪 barbarella	2025-10-10 18:25:18 UTC · (1 year ago)	Multiple (2) times attack on https port 443: Attempted to access git files. (GET /.git/config) 18:25:19 Attempted to access git files. (GET /.git/config)	Web App Attack
🇰🇪 Oste	2025-10-10 17:10:47 UTC · (1 year ago)	Unauthorized SSH login attempt detected using a non-existent user account.	Brute-Force SSH
🇩🇪 barbarella	2025-10-10 07:57:56 UTC · (1 year ago)	Multiple (2) times attack on https port 443: hacking attempt of version control system (GET /.git/config) 07:57:57 hacking attempt of version control system (GET /.git/config)	Hacking Web App Attack
🇩🇪 barbarella	2025-10-09 22:41:23 UTC · (1 year ago)	Multiple (2) times attack on https port 443: Configuration snooping (GET /.git/config) 22:41:24 Configuration snooping (GET /.git/config)	Hacking Web App Attack
🇩🇪 ut-addicted.com	2025-10-09 19:01:45 UTC · (1 year ago)	\[Thu Oct 09 21:01:43.816109 2025\] \[:error\] \[pid 22434:tid 140546066573056\] \[client 170.64.207.88:47124\] \[client 170.64.207.88\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/loc ... show more \[Thu Oct 09 21:01:43.816109 2025\] \[:error\] \[pid 22434:tid 140546066573056\] \[client 170.64.207.88:47124\] \[client 170.64.207.88\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.git/config"\] \[unique_id "aOgGl9lMgzgaASHN3o2V7gAAAEk"\] show less	Brute-Force Web App Attack
🇩🇪 Hary74656	2025-10-09 10:36:38 UTC · (1 year ago)	[Thu Oct 09 10:15:36.355383 2025] [:error] [pid 93519:tid 93603] [client 170.64.207.88:59846] [client 170.64.207.88] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/ru ... show more [Thu Oct 09 10:15:36.355383 2025] [:error] [pid 93519:tid 93603] [client 170.64.207.88:59846] [client 170.64.207.88] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "78.46.107.184"] [uri "/.git/config"] [unique_id "aOdvKJfjoPWuX_JfcOnCIQAABCA"] [Thu Oct 09 11:08:41.462060 2025] [:error] [pid 93249:tid 93378] [client 170.64.207.88:55072] [client 170.64.207.88] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-c ... show less	Web App Attack
🇩🇪 ut-addicted.com	2025-10-09 08:20:01 UTC · (1 year ago)	\[Thu Oct 09 10:19:59.493397 2025\] \[:error\] \[pid 22691:tid 140546014123776\] \[client 170.64.207.88:39822\] \[client 170.64.207.88\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/loc ... show more \[Thu Oct 09 10:19:59.493397 2025\] \[:error\] \[pid 22691:tid 140546014123776\] \[client 170.64.207.88:39822\] \[client 170.64.207.88\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.git/config"\] \[unique_id "aOdwL3riSv5q5p-SJkLLKgAAAM4"\] show less	Brute-Force Web App Attack
🇩🇪 ut-addicted.com	2025-10-09 00:10:08 UTC · (1 year ago)	\[Thu Oct 09 02:10:06.294855 2025\] \[:error\] \[pid 2907:tid 140545993144064\] \[client 170.64.207.88:48508\] \[client 170.64.207.88\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/loca ... show more \[Thu Oct 09 02:10:06.294855 2025\] \[:error\] \[pid 2907:tid 140545993144064\] \[client 170.64.207.88:48508\] \[client 170.64.207.88\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.git/config"\] \[unique_id "aOb9Xgj1gZE-sRL@jqgZ9QAAANA"\] show less	Brute-Force Web App Attack
🇳🇱 juutis	2025-10-08 23:29:59 UTC · (1 year ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇩🇪 ut-addicted.com	2025-10-08 17:37:37 UTC · (1 year ago)	\[Wed Oct 08 19:37:35.703747 2025\] \[:error\] \[pid 2907:tid 140546150491904\] \[client 170.64.207.88:32968\] \[client 170.64.207.88\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/loca ... show more \[Wed Oct 08 19:37:35.703747 2025\] \[:error\] \[pid 2907:tid 140546150491904\] \[client 170.64.207.88:32968\] \[client 170.64.207.88\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.git/config"\] \[unique_id "aOahXwj1gZE-sRL@jqgBdQAAAME"\] show less	Brute-Force Web App Attack
🇬🇧 Aetherweb Ark	2025-10-08 14:45:08 UTC · (1 year ago)	(mod_security) mod_security (id:949110) triggered by 170.64.207.88 (AU/Australia/-): N in the last X secs	Web App Attack
🇳🇱 jaapeldoorn	2025-10-08 10:44:47 UTC · (1 year ago)	[Wed Oct 08 02:56:18.877859 2025] [authz_core:error] [pid 410158:tid 410197] [client 170.64.207.88:59302] AH01630: client denied by server configuration: /var/www [Wed Oct 08 02:56:19.754164 2025] [authz_core:error] [pid 410159:tid 410193] [client 17 ... show more [Wed Oct 08 02:56:18.877859 2025] [authz_core:error] [pid 410158:tid 410197] [client 170.64.207.88:59302] AH01630: client denied by server configuration: /var/www [Wed Oct 08 02:56:19.754164 2025] [authz_core:error] [pid 410159:tid 410193] [client 170.64.207.88:56320] AH01630: client denied by server configuration: /var/www [Wed Oct 08 12:44:44.843124 2025] [authz_core:error] [pid 410158:tid 410164] [client 170.64.207.88:39218] AH01630: client denied by server configuration: /var/www ... show less	Brute-Force

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.101

🇭🇰 119.28.24.232

🇰🇪 102.0.37.52

🇫🇮 37.27.51.141

🇺🇸 34.96.49.3

🇺🇸 20.168.11.163

🇦🇷 149.22.83.20

🇳🇱 77.239.124.145

🇺🇸 2602:80d:1007::70

🇺🇸 209.62.221.82

🇯🇵 120.50.206.196

🇹🇼 111.253.123.153

🇮🇹 81.127.149.116

🇩🇪 69.5.169.101

🇫🇷 51.159.111.44

🇮🇳 20.219.91.90

🇨🇳 117.191.127.86

🇳🇬 102.220.45.186

🇨🇦 85.217.149.22

🇺🇸 66.132.195.26