JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

161.129.211.64

Neutral Activity

Abuse Confidence Score

0% Low Risk

23 reports

16 reporters · latest 3 months ago

ISP: Datto, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS15359
Domain Name: datto.com
Country: 🇺🇸 United States of America
City: New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

161.129.211.64 has been reported 23 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

23 from 16 distinct reporters

First reported

March 4th 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 victoryur	2026-08-09 00:03:11 UTC · (3 months ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇷🇺 victoryur	2026-07-10 00:04:06 UTC · (4 months ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇷🇺 victoryur	2026-06-09 00:05:32 UTC · (5 months ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇷🇺 victoryur	2026-05-06 00:03:31 UTC · (6 months ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇷🇺 victoryur	2026-04-05 00:03:38 UTC · (7 months ago)	Reported by Fail2Ban on 24.finkont.ru (sshd)	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-07 23:34:18 UTC · (8 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-07 20:11:55 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-06 23:32:43 UTC · (8 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-05 20:11:54 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 shaunc	2026-03-05 12:32:38 UTC · (8 months ago)	Mar 5 06:32:31 mailman sshd[6990]: Connection closed by 161.129.211.64 port 43062 [preauth] Mar 5 06:32:32 mailman sshd[7004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=use1-dtc-server-435859.datto.com ... show more Mar 5 06:32:31 mailman sshd[6990]: Connection closed by 161.129.211.64 port 43062 [preauth] Mar 5 06:32:32 mailman sshd[7004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=use1-dtc-server-435859.datto.com user=root Mar 5 06:32:34 mailman sshd[7004]: Failed password for root from 161.129.211.64 port 43068 ssh2 show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-03-05 09:52:14 UTC · (8 months ago)	2026-03-05T10:52:10.847214+01:00 router01.ib-heddier.de sshd[3780567]: Connection closed by authenticating user root 161.129.211.64 port 57326 [preauth] 2026-03-05T10:52:11.534109+01:00 router01.ib-heddier.de sshd[3780569]: Connection closed by authe ... show more 2026-03-05T10:52:10.847214+01:00 router01.ib-heddier.de sshd[3780567]: Connection closed by authenticating user root 161.129.211.64 port 57326 [preauth] 2026-03-05T10:52:11.534109+01:00 router01.ib-heddier.de sshd[3780569]: Connection closed by authenticating user root 161.129.211.64 port 57334 [preauth] 2026-03-05T10:52:12.215289+01:00 router01.ib-heddier.de sshd[3780572]: Connection closed by authenticating user root 161.129.211.64 port 57350 [preauth] 2026-03-05T10:52:12.908834+01:00 router01.ib-heddier.de sshd[3780576]: Connection closed by authenticating user root 161.129.211.64 port 33318 [preauth] 2026-03-05T10:52:13.597567+01:00 router01.ib-heddier.de sshd[3780578]: Connection closed by authenticating user root 161.129.211.64 port 33328 [preauth] show less	Brute-Force
🇬🇧 mateisr	2026-03-05 07:04:46 UTC · (8 months ago)	Fail2Ban - SSHD brute-force SSH server ...	Brute-Force SSH
🇨🇦 Ssmidge	2026-03-05 05:57:16 UTC · (8 months ago)	type=USER_ERR msg=audit(1772690235.226:287747): pid=677752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=161.129.211.64 addr=161.129.211.64 te ... show more type=USER_ERR msg=audit(1772690235.226:287747): pid=677752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=161.129.211.64 addr=161.129.211.64 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ERR msg=audit(1772690235.416:287755): pid=677754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=161.129.211.64 addr=161.129.211.64 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ERR msg=audit(1772690235.628:287763): pid=677756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=161.129.211.64 addr=161.129.211.64 terminal=ssh res=failed'UID="root" AUID="unset" ... show less	Brute-Force
🇨🇭 SOC [GOLINE SA]	2026-03-05 04:40:47 UTC · (8 months ago)	SSH Brute Force Attack === ATTACK === Type: SSH Authentication Attack \| Pattern: Multiple failed login attempts === SOURCE === IP: 161.129.211.64 (IPv4) \| Country: United States \| ISP: DATTO \| rDNS: use1-dtc-server-435859.datto.com === TARGET === Hos ... show more SSH Brute Force Attack === ATTACK === Type: SSH Authentication Attack \| Pattern: Multiple failed login attempts === SOURCE === IP: 161.129.211.64 (IPv4) \| Country: United States \| ISP: DATTO \| rDNS: use1-dtc-server-435859.datto.com === TARGET === Host: uisp.goline.ch \| Port: 22 \| Protocol: TCP === RESPONSE === Time: 2026-03-05 04:40:47 \| Action: Blocked show less	SSH Brute-Force
🇩🇪 tall1oN	2026-03-05 01:31:04 UTC · (8 months ago)	2026-03-05T02:31:00.052153+01:00 gw1 sshd-session[929982]: Failed password for root from 161.129.211.64 port 50204 ssh2 2026-03-05T02:31:01.826736+01:00 gw1 sshd-session[929985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty= ... show more 2026-03-05T02:31:00.052153+01:00 gw1 sshd-session[929982]: Failed password for root from 161.129.211.64 port 50204 ssh2 2026-03-05T02:31:01.826736+01:00 gw1 sshd-session[929985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.129.211.64 user=root 2026-03-05T02:31:04.130470+01:00 gw1 sshd-session[929985]: Failed password for root from 161.129.211.64 port 50216 ssh2 ... show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.89

🇩🇪 172.217.34.17

🇸🇬 128.199.93.183

🇳🇱 109.160.32.108

🇩🇪 69.5.169.223

🇺🇸 45.136.25.75

🇳🇱 35.214.153.37

🇺🇸 195.184.76.102

🇳🇱 193.47.62.69

🇧🇷 177.75.130.112

🇺🇸 172.84.97.125

🇩🇪 167.94.146.61

🇫🇷 78.112.56.6

🇺🇸 75.4.210.53

🇺🇸 67.144.239.161

🇮🇳 59.97.21.114

🇰🇷 14.55.144.22

🇦🇺 189.81.240.112

🇳🇱 89.21.67.186

🇳🇱 35.214.243.124