JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.223.52

170.64.223.52 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.223.52

Whois 170.64.223.52

IP Abuse Reports for 170.64.223.52:

This IP address has been reported a total of 72 times from 35 distinct sources. 170.64.223.52 was first reported on September 12th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-05-23 14:04:01 (1 month ago)	ICS Labs identified 170.64.223.52 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇧🇪 cmbplf	2026-05-05 09:49:45 (2 months ago)	5 requests with url.path /indoxploit.php	Brute-Force Bad Web Bot
🇮🇩 sockominfo	2026-05-05 09:00:27 (2 months ago)	TheHive Threat Scoring assessment: 170.64.223.52 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:und ... show more TheHive Threat Scoring assessment: 170.64.223.52 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:undefined/AC:undefined/PR:undefined/UI:undefined/S:undefined/C:undefined/I:undefined/A:undefined Bayesian Probability: 80% MITRE ATT&CK: Exploit Public-Facing Application, Valid Accounts, Command and Scripting Interpreter, Application Layer Protocol, Brute Force, Account Manipulation OWASP Risk: High (L:8, I:6) Combined Score: 4.92/10 Confidence Interval: ±0.01 Status: Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-05-05 08:00:31 (2 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
🇺🇦 URAN Publishing Service	2026-05-05 07:44:49 (2 months ago)	170.64.223.52 - - [05/May/2026:10:44:48 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 ... show more 170.64.223.52 - - [05/May/2026:10:44:48 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 3353 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Web App Attack
🇫🇷 Sklurk	2026-05-05 05:44:25 (2 months ago)	Web App Attack	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-04 02:26:42 (2 months ago)	170.64.223.52 - - [04/May/2026:05:26:42 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5 ... show more 170.64.223.52 - - [04/May/2026:05:26:42 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-03 08:43:29 (2 months ago)	170.64.223.52 - - [03/May/2026:11:43:22 +0300] "GET /wp-content/flame.php HTTP/1.1" 404 3352 "www.go ... show more 170.64.223.52 - - [03/May/2026:11:43:22 +0300] "GET /wp-content/flame.php HTTP/1.1" 404 3352 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 170.64.223.52 - - [03/May/2026:11:43:21 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 3353 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Web App Attack
🇩🇪 LRob	2026-05-03 08:00:08 (2 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-05-03 06:03:36 (2 months ago)	170.64.223.52 - - [03/May/2026:09:03:28 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 ... show more 170.64.223.52 - - [03/May/2026:09:03:28 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 3349 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 170.64.223.52 - - [03/May/2026:09:03:29 +0300] "GET /wp-includes/class-wp-other.php HTTP/1.1" 404 3351 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Web App Attack
🇺🇸 jormaster3k	2026-05-03 03:52:35 (2 months ago)	Attack against Apache (too many 404s)	Web App Attack
Anonymous	2026-05-02 11:25:17 (2 months ago)	[02/May/2026:14:25:14 +0300] 177772111490.759008 170.64.223.52 55748 148.251.76.218 80 [02/May/2026: ... show more [02/May/2026:14:25:14 +0300] 177772111490.759008 170.64.223.52 55748 148.251.76.218 80 [02/May/2026:14:25:16 +0300] 177772111672.829243 170.64.223.52 55978 148.251.76.218 443 show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-02 09:33:28 (2 months ago)	170.64.223.52 - - [02/May/2026:12:33:27 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 ... show more 170.64.223.52 - - [02/May/2026:12:33:27 +0300] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 3353 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 170.64.223.52 - - [02/May/2026:12:33:28 +0300] "GET /wp-content/flame.php HTTP/1.1" 404 3353 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Web App Attack
🇮🇩 sockominfo	2026-05-01 13:00:28 (2 months ago)	TheHive Threat Scoring assessment: 170.64.223.52 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:und ... show more TheHive Threat Scoring assessment: 170.64.223.52 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:undefined/AC:undefined/PR:undefined/UI:undefined/S:undefined/C:undefined/I:undefined/A:undefined Bayesian Probability: 80% MITRE ATT&CK: Exploit Public-Facing Application, Valid Accounts, Command and Scripting Interpreter, Application Layer Protocol, Brute Force, Account Manipulation OWASP Risk: High (L:8, I:6) Combined Score: 4.92/10 Confidence Interval: ±0.01 Status: Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇺🇸 mawan	2026-05-01 12:15:00 (2 months ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 202.4.122.181

🇧🇷 187.0.18.168

🇹🇷 185.67.33.213

🇫🇮 147.185.133.18

🇺🇸 129.153.31.0

🇲🇾 47.250.184.67

🇨🇳 218.64.60.165

🇺🇸 142.171.227.7

🇭🇰 104.208.89.156

🇺🇸 104.155.154.215

🇳🇱 104.28.249.139

🇺🇸 69.49.246.176

🇵🇭 61.28.144.154

🇩🇪 45.153.56.155

🇮🇩 38.253.224.32

🇬🇧 35.203.211.181

🇨🇳 222.91.124.34

🇵🇾 190.93.176.84

🇪🇸 188.164.195.116

🇹🇭 182.52.90.106