JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.129.133

170.64.129.133 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 56%: ?

56%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.129.133

Whois 170.64.129.133

IP Abuse Reports for 170.64.129.133:

This IP address has been reported a total of 60 times from 46 distinct sources. 170.64.129.133 was first reported on April 19th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-10-16 05:35:57 (1 day ago)	3.960 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇺🇸 rsiddall	2026-10-16 04:16:59 (1 day ago)	170.64.129.133 - - [16/Oct/2026:00:13:13 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5 ... show more 170.64.129.133 - - [16/Oct/2026:00:13:13 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [16/Oct/2026:00:13:51 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [16/Oct/2026:00:14:33 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [16/Oct/2026:00:15:19 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [16/Oct/2026:00:16:06 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [16/Oct/2026:00:16:58 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" ... show less	Brute-Force
🇺🇸 Jason Howell	2026-10-16 04:14:07 (1 day ago)	170.64.129.133 - - [15/Oct/2026:23:08:39 -0500] "GET /wp-login.php HTTP/1.1" 301 601 "-" "Mozilla/5. ... show more 170.64.129.133 - - [15/Oct/2026:23:08:39 -0500] "GET /wp-login.php HTTP/1.1" 301 601 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:23:08:40 -0500] "GET /wp-login.php HTTP/1.1" 200 6669 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:23:12:40 -0500] "POST /wp-login.php HTTP/1.1" 200 12742 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:23:13:31 -0500] "POST /wp-login.php HTTP/1.1" 200 9110 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:23:14:06 -0500] "POST /wp-login.php HTTP/1.1" 200 9110 "-" "Mozilla/5.0" ... show less	Web App Attack
Anonymous	2026-10-16 04:14:03 (1 day ago)	Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/1.1	Hacking Web App Attack
🇺🇸 rsiddall	2026-10-15 13:26:17 (2 days ago)	170.64.129.133 - - [15/Oct/2026:09:19:31 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5 ... show more 170.64.129.133 - - [15/Oct/2026:09:19:31 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:09:20:40 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:09:21:50 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:09:23:09 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:09:24:39 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:09:26:16 -0400] "POST /wp-login.php HTTP/1.1" 403 214 "-" "Mozilla/5.0" ... show less	Brute-Force
🇮🇹 VHosting	2026-10-15 13:25:04 (2 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 Jason Howell	2026-10-15 13:21:06 (2 days ago)	170.64.129.133 - - [15/Oct/2026:08:14:30 -0500] "GET /wp-login.php HTTP/1.1" 301 601 "-" "Mozilla/5. ... show more 170.64.129.133 - - [15/Oct/2026:08:14:30 -0500] "GET /wp-login.php HTTP/1.1" 301 601 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:08:14:30 -0500] "GET /wp-login.php HTTP/1.1" 200 6669 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:08:18:36 -0500] "POST /wp-login.php HTTP/1.1" 200 9166 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:08:20:00 -0500] "POST /wp-login.php HTTP/1.1" 200 12688 "-" "Mozilla/5.0" 170.64.129.133 - - [15/Oct/2026:08:21:05 -0500] "POST /wp-login.php HTTP/1.1" 200 9110 "-" "Mozilla/5.0" ... show less	Web App Attack
🇧🇪 voormedia	2026-10-15 13:12:50 (2 days ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇵🇱 Budyn	2026-10-15 12:53:29 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: telemetry.sweetpuddingtrap.top \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-10-15 12:48:40 (2 days ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits. show less	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-24 08:55:32 (3 weeks ago)	This address asked our authoritative DNS server for a full zone transfer (AXFR/IXFR) it is not entit ... show more This address asked our authoritative DNS server for a full zone transfer (AXFR/IXFR) it is not entitled to. A zone transfer hands over every record of a domain at once — the reconnaissance step before targeted attacks on the hosts it lists. Only secondary servers we name may ask; anyone else is blocked at the first attempt. Please check what runs on this address. \| 2026-09-24 08:55 UTC show less	DNS Compromise
🇹🇷 rtbh.com.tr	2025-04-21 20:06:13 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-04-21 00:06:12 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 ThreatBook.io	2025-04-20 23:12:44 (1 year ago)	ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/170.64.129.133 2025-04-20 01:22 ... show more ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/170.64.129.133 2025-04-20 01:22:25 ["uname -s -v -n -r -m"] 2025-04-20 01:22:16 ["uname -s -v -n -r -m"] 2025-04-20 01:23:25 ["uname -s -v -n -r -m"] show less	SSH
🇹🇷 rtbh.com.tr	2025-04-20 20:06:13 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.76.236.71

🇨🇳 118.250.132.51

🇺🇸 45.131.194.180

🇫🇮 147.185.133.224

🇫🇮 147.185.133.69

🇺🇸 136.144.42.246

🇺🇸 66.132.195.54

🇺🇸 170.39.227.251

🇻🇳 116.110.150.157

🇨🇳 60.217.65.254

🇳🇱 160.119.76.157

🇺🇸 135.135.243.199

🇨🇳 121.10.215.142

🇸🇪 104.22.219.49

🇷🇴 92.118.39.50

🇺🇸 20.65.179.162

🇺🇸 2001:19f0:ac01:1ad7:5400:6ff:fe72:b8f2

🇲🇽 187.212.33.78

🇺🇸 184.176.134.102

🇺🇸 172.68.245.144