JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.137.227

170.64.137.227 was found in our database!

This IP was reported 136 times. Confidence of Abuse is 56%: ?

56%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.137.227

Whois 170.64.137.227

IP Abuse Reports for 170.64.137.227:

This IP address has been reported a total of 136 times from 100 distinct sources. 170.64.137.227 was first reported on December 21st 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-03 22:00:00 (2 weeks ago)	Auto-ban: >3000 req/min op 2026-07-03	Web App Attack SSH Hacking
🇵🇱 Roper123	2026-07-03 18:48:10 (3 weeks ago)	Web app exploits	Web App Attack
🇮🇪 AutosOnShow	2026-07-03 18:30:07 (3 weeks ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-07-03 18:29:25.954 \|	Web App Attack
🇯🇵 HeliJP	2026-07-03 17:45:24 (3 weeks ago)	2026-07-03T16:59:00Z - Recognized attacks\bad behavior from IP address 170.64.137.227 on port 443\80 ... show more 2026-07-03T16:59:00Z - Recognized attacks\bad behavior from IP address 170.64.137.227 on port 443\80 (3 daily hits): client denied by server configuration show less	Port Scan Hacking SQL Injection Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 17:06:05 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 170.64.137.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.137.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 13:06:00.703440 2026] [security2:error] [pid 12448:tid 12448] [client 170.64.137.227:52332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "walterceron.com"] [uri "/.git/config"] [unique_id "akfr-KOar0-tm2GXYyao7AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-07-03 14:07:38 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇪 voormedia	2026-07-03 12:50:52 (3 weeks ago)	Accessed trap at '/.git/config'	Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 12:36:45 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 170.64.137.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.137.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 08:36:39.210437 2026] [security2:error] [pid 30998:tid 31015] [client 170.64.137.227:58178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webcraftestudio.com"] [uri "/.git/config"] [unique_id "akes19sKCIZEcTtm2IggMAAAAY8"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 miriks	2026-07-03 12:28:50 (3 weeks ago)	Automated scan detected: GET /.git/config — UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 ( ... show more Automated scan detected: GET /.git/config — UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 09:50:20 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 170.64.137.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.137.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 05:50:12.179947 2026] [security2:error] [pid 19388:tid 19388] [client 170.64.137.227:49744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infolinkqr.com"] [uri "/.git/config"] [unique_id "akeF1CQX_kqM-QK1HGKzdgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 interbiznw.com	2026-07-03 09:18:27 (3 weeks ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇯🇵 beon	2026-07-03 09:15:08 (3 weeks ago)	[DateTime=>2026-07-03T09:15:08Z to 2026-07-03T09:15:09Z (UTC)] , [HoneyPot_Hits=>twice] , [HoneyPots ... show more [DateTime=>2026-07-03T09:15:08Z to 2026-07-03T09:15:09Z (UTC)] , [HoneyPot_Hits=>twice] , [HoneyPots=>/.git/config] , [total_Hits=>twice] show less	Bad Web Bot Web App Attack Hacking
🇩🇪 on-com	2026-07-03 08:55:13 (3 weeks ago)	URL scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 08:51:39 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 170.64.137.227 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 170.64.137.227 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 04:51:31.201445 2026] [security2:error] [pid 10658:tid 10658] [client 170.64.137.227:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colonybet.com"] [uri "/.git/config"] [unique_id "akd4E4ETv2tpK0LZZNQmWAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-07-03 08:51:09 (3 weeks ago)	563 requests with url.path .git/ 502 requests with url.path */.git/config	Brute-Force Bad Web Bot

Showing 1 to 15 of 136 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 172.213.144.209

🇨🇳 125.112.207.126

🇹🇷 94.154.43.50

🇨🇦 85.217.149.28

🇳🇱 46.151.178.13

🇺🇸 216.25.89.90

🇨🇱 181.212.47.61

🇷🇺 37.204.111.153

🇮🇪 18.201.33.217

🇩🇪 213.209.159.235

🇧🇷 186.223.99.53

🇮🇩 182.9.49.6

🇸🇦 154.205.134.214

🇮🇹 151.49.154.46

🇮🇳 103.51.216.200

🇵🇱 74.248.136.76

🇺🇸 69.12.80.254

🇳🇿 45.133.7.78

🇮🇹 5.89.75.194

🇬🇧 2a06:4884:d000::e9