JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

67.205.158.129

Activity Trending Down

Abuse Confidence Score

99% Critical

28 reports

24 reporters · latest 1 week ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

28 from 24 distinct reporters

First reported

November 2nd 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 7 🇫🇷 France 5 🇩🇪 Germany 4

Most common categories Web App Attack 23 Bad Web Bot 14 Brute-Force 6 Hacking 5 Port Scan 4

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇹 im	2026-11-04 07:16:08 UTC · (1 week ago)	HTTP	Port Scan
🇨🇦 AEITS	2026-11-03 13:23:15 UTC · (1 week ago)	Fail2Ban	Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-11-03 13:11:50 UTC · (1 week ago)	ipoac.nl:80 67.205.158.129 - - [03/Nov/2026:14:11:49 +0100] 84.27.222.8 "GET /.git/config HTTP/1.1" 403 1709 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"	Bad Web Bot
🇺🇸 TPI-Abuse	2026-11-03 13:05:05 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 67.205.158.129 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:04:57.209009 2026] [security2:error] [pid 23202:tid 23202] [client 67.205.158.129:48974] ... show more (mod_security) mod_security (id:210492) triggered by 67.205.158.129 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:04:57.209009 2026] [security2:error] [pid 23202:tid 23202] [client 67.205.158.129:48974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.13"] [uri "/.git/config"] [unique_id "aunb-Y9dkUHoRbb8zN9qCwAAACw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 f2_IT	2026-11-03 13:04:51 UTC · (1 week ago)	Blocked web application exploit attempt (WAF rule %!s(*string=0x1bac1d91add0))	Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 12:48:20 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 67.205.158.129 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:48:15.489717 2026] [security2:error] [pid 21601:tid 21601] [client 67.205.158.129:33664] ... show more (mod_security) mod_security (id:210492) triggered by 67.205.158.129 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:48:15.489717 2026] [security2:error] [pid 21601:tid 21601] [client 67.205.158.129:33664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.140"] [uri "/.git/config"] [unique_id "aunYD1sO2HQ4_KS-hgknrwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 knock	2026-11-03 12:42:49 UTC · (1 week ago)	Knock-Knock honeypot brute-force: HTTP (1 total hits)	Web App Attack
🇳🇱 Alt255	2026-11-03 12:36:30 UTC · (1 week ago)	[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 67.205.158.129 - - [03/Nov/2026:13:36:09 +0100] "GET /.git/config HTTP/1.1" 404 7439 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT ... show more [ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 67.205.158.129 - - [03/Nov/2026:13:36:09 +0100] "GET /.git/config HTTP/1.1" 404 7439 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 12:29:57 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 67.205.158.129 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:29:50.645035 2026] [security2:error] [pid 15343:tid 15343] [client 67.205.158.129:45192] ... show more (mod_security) mod_security (id:210492) triggered by 67.205.158.129 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:29:50.645035 2026] [security2:error] [pid 15343:tid 15343] [client 67.205.158.129:45192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.217"] [uri "/.git/config"] [unique_id "aunTvs74GhGwR1E-kC-tBgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Mailguard-FRD	2026-11-03 12:24:42 UTC · (1 week ago)	67.205.158.129 [03/Nov/2026:13:24:26 +0100] [redacted] "GET /.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/5 ...	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-11-03 12:09:19 UTC · (1 week ago)	Accessed trap at '/.git/config'	Web App Attack
🇺🇸 brantknudson.org	2026-11-03 12:05:33 UTC · (1 week ago)	Request path 'GET /.git/config HTTP/1.1'	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-11-03 12:05:31 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 67.205.158.129 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:05:28.112120 2026] [security2:error] [pid 14431:tid 14431] [client 67.205.158.129:58426] ... show more (mod_security) mod_security (id:210492) triggered by 67.205.158.129 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:05:28.112120 2026] [security2:error] [pid 14431:tid 14431] [client 67.205.158.129:58426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.109"] [uri "/.git/config"] [unique_id "aunOCNHyNxIkU6fa_Q9VIQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-11-03 12:05:24 UTC · (1 week ago)	[ftpbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 67.205.158.129 - - \[03/Nov/2026:13:05:13 +0100\] "GET /.git/config HTTP/1.1" 404 7271 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, ... show more [ftpbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 67.205.158.129 - - \[03/Nov/2026:13:05:13 +0100\] "GET /.git/config HTTP/1.1" 404 7271 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-11-03 12:04:21 UTC · (1 week ago)	67.205.158.129 - - [03/Nov/2026:12:04:21 +0000] "GET /.git/config HTTP/1.1" 404 7896 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ...	Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.232

🇨🇱 186.189.85.118

🇵🇱 162.158.172.59

🇸🇬 124.243.154.163

🇫🇷 85.217.140.34

🇸🇪 78.66.44.23

🇳🇱 77.239.124.62

🇹🇭 203.172.213.166

🇺🇸 136.144.42.202

🇺🇿 31.148.165.13

🇳🇱 195.178.110.30

🇨🇴 181.78.5.101

🇹🇼 172.68.87.23

🇭🇰 118.193.44.112

🇨🇳 116.179.32.145

🇳🇱 109.160.32.172

🇩🇪 109.160.32.48

🇷🇺 95.25.170.171

🇩🇪 79.215.47.135

🇺🇸 45.156.129.165