JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

170.64.139.153

Recent Activity

Abuse Confidence Score

43% Elevated

268 reports

116 reporters · latest 1 day ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇦🇺 Australia
City: Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

268 from 116 distinct reporters

First reported

January 12th 2024

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇨🇭 Switzerland 2 🇩🇪 Germany 2 🇦🇺 Australia 1

Most common categories Web App Attack 4 Bad Web Bot 2 Brute-Force 2 Hacking 1 SSH 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 SOC [GOLINE SA]	2026-10-27 17:04:07 (1 day ago)	FortiGate detected brute force login attempt from IPv4 address 170.64.139.153	Brute-Force SSH
🇨🇭 SOC [GOLINE SA]	2026-10-27 16:32:38 (1 day ago)	FortiGate IPS: WordPress.REST.API.batch-route.SQL.Injection (severity critical)	Hacking
🇦🇺 aranguren.org	2026-10-27 15:31:11 (1 day ago)	170.64.139.153 - - [27/Oct/2026:23:59:57 +1100] "GET /wp-login.php HTTP/1.1" 404 16 "-" "Mozilla/5.0" 170.64.139.153 - - [28/Oct/2026:02:31:10 +1100] "POST /wp-json/batch/v1 HTTP/1.1" 404 999 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (K ... show more 170.64.139.153 - - [27/Oct/2026:23:59:57 +1100] "GET /wp-login.php HTTP/1.1" 404 16 "-" "Mozilla/5.0" 170.64.139.153 - - [28/Oct/2026:02:31:10 +1100] "POST /wp-json/batch/v1 HTTP/1.1" 404 999 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 170.64.139.153 - - [28/Oct/2026:02:31:10 +1100] "POST /wp-json/batch/v1 HTTP/1.1" 404 999 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot
🇵🇱 Budyn	2026-10-27 15:12:39 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: minio.sweetpuddingtrap.top \| URI: /wp-json/batch/v1 \| ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: minio.sweetpuddingtrap.top \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"AU","Cf-Connecting-Ip":"170.64.139.153","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a512a3df2ef9339d-SYD","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"170.64.139.153"} show less	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-10-27 13:17:46 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 147	Exploited Host Web App Attack
🇸🇪 vaia.cloud	2026-10-27 13:00:02 (1 day ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
🇩🇪 zUnlegit	2026-10-27 12:49:35 (1 day ago)	Automated web scanner requested sensitive path: /wp-login.php	Web App Attack
🇩🇪 sf-noh.de	2024-04-21 17:19:43 (2 years ago)	Mar 22 07:27:04 v2202111159968167802 sshd[2398365]: Invalid user odoo from 170.64.139.153 port 53858 Mar 22 07:27:23 v2202111159968167802 sshd[2398451]: Invalid user awsgui from 170.64.139.153 port 42592 Mar 22 07:27:30 v2202111159968167802 sshd[2398 ... show more Mar 22 07:27:04 v2202111159968167802 sshd[2398365]: Invalid user odoo from 170.64.139.153 port 53858 Mar 22 07:27:23 v2202111159968167802 sshd[2398451]: Invalid user awsgui from 170.64.139.153 port 42592 Mar 22 07:27:30 v2202111159968167802 sshd[2398483]: Invalid user tom from 170.64.139.153 port 38836 Mar 22 07:27:36 v2202111159968167802 sshd[2398568]: Invalid user oracle from 170.64.139.153 port 35076 Mar 22 07:27:49 v2202111159968167802 sshd[2398645]: Invalid user esuser from 170.64.139.153 port 55782 ... show less	Brute-Force SSH
🇩🇪 qli.de	2024-04-21 17:19:43 (2 years ago)	Mar 22 07:27:04 v2202111159968167802 sshd[2398365]: Invalid user odoo from 170.64.139.153 port 53858 Mar 22 07:27:23 v2202111159968167802 sshd[2398451]: Invalid user awsgui from 170.64.139.153 port 42592 Mar 22 07:27:30 v2202111159968167802 sshd[2398 ... show more Mar 22 07:27:04 v2202111159968167802 sshd[2398365]: Invalid user odoo from 170.64.139.153 port 53858 Mar 22 07:27:23 v2202111159968167802 sshd[2398451]: Invalid user awsgui from 170.64.139.153 port 42592 Mar 22 07:27:30 v2202111159968167802 sshd[2398483]: Invalid user tom from 170.64.139.153 port 38836 Mar 22 07:27:36 v2202111159968167802 sshd[2398568]: Invalid user oracle from 170.64.139.153 port 35076 Mar 22 07:27:49 v2202111159968167802 sshd[2398645]: Invalid user esuser from 170.64.139.153 port 55782 ... show less	Brute-Force SSH
🇩🇪 sf-noh.de	2024-04-11 06:09:38 (2 years ago)	Mar 22 07:27:04 v2202111159968167802 sshd[2398365]: Invalid user odoo from 170.64.139.153 port 53858 Mar 22 07:27:23 v2202111159968167802 sshd[2398451]: Invalid user awsgui from 170.64.139.153 port 42592 Mar 22 07:27:30 v2202111159968167802 sshd[2398 ... show more Mar 22 07:27:04 v2202111159968167802 sshd[2398365]: Invalid user odoo from 170.64.139.153 port 53858 Mar 22 07:27:23 v2202111159968167802 sshd[2398451]: Invalid user awsgui from 170.64.139.153 port 42592 Mar 22 07:27:30 v2202111159968167802 sshd[2398483]: Invalid user tom from 170.64.139.153 port 38836 Mar 22 07:27:36 v2202111159968167802 sshd[2398568]: Invalid user oracle from 170.64.139.153 port 35076 Mar 22 07:27:49 v2202111159968167802 sshd[2398645]: Invalid user esuser from 170.64.139.153 port 55782 ... show less	Brute-Force SSH
🇩🇪 qli.de	2024-04-11 06:09:38 (2 years ago)	Mar 22 07:27:04 v2202111159968167802 sshd[2398365]: Invalid user odoo from 170.64.139.153 port 53858 Mar 22 07:27:23 v2202111159968167802 sshd[2398451]: Invalid user awsgui from 170.64.139.153 port 42592 Mar 22 07:27:30 v2202111159968167802 sshd[2398 ... show more Mar 22 07:27:04 v2202111159968167802 sshd[2398365]: Invalid user odoo from 170.64.139.153 port 53858 Mar 22 07:27:23 v2202111159968167802 sshd[2398451]: Invalid user awsgui from 170.64.139.153 port 42592 Mar 22 07:27:30 v2202111159968167802 sshd[2398483]: Invalid user tom from 170.64.139.153 port 38836 Mar 22 07:27:36 v2202111159968167802 sshd[2398568]: Invalid user oracle from 170.64.139.153 port 35076 Mar 22 07:27:49 v2202111159968167802 sshd[2398645]: Invalid user esuser from 170.64.139.153 port 55782 ... show less	Brute-Force SSH
🇨🇦 electronico	2024-04-06 10:27:01 (2 years ago)	Apr 6 21:21:34 electronicohost sshd[2494495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.139.153 user=root Apr 6 21:21:36 electronicohost sshd[2494495]: Failed password for root from 170.64.139.1 ... show more Apr 6 21:21:34 electronicohost sshd[2494495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.139.153 user=root Apr 6 21:21:36 electronicohost sshd[2494495]: Failed password for root from 170.64.139.153 port 45926 ssh2 Apr 6 21:26:58 electronicohost sshd[2495036]: Invalid user ion from 170.64.139.153 port 33952 Apr 6 21:26:58 electronicohost sshd[2495036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.139.153 Apr 6 21:27:00 electronicohost sshd[2495036]: Failed password for invalid user ion from 170.64.139.153 port 33952 ssh2 show less	Brute-Force SSH
Anonymous	2024-04-06 10:24:58 (2 years ago)	2024-04-06T12:19:36.659347+02:00 svr10 sshd[863678]: Failed password for root from 170.64.139.153 port 49784 ssh2 2024-04-06T12:19:38.977305+02:00 svr10 sshd[863678]: Connection closed by authenticating user root 170.64.139.153 port 49784 [preauth] 2 ... show more 2024-04-06T12:19:36.659347+02:00 svr10 sshd[863678]: Failed password for root from 170.64.139.153 port 49784 ssh2 2024-04-06T12:19:38.977305+02:00 svr10 sshd[863678]: Connection closed by authenticating user root 170.64.139.153 port 49784 [preauth] 2024-04-06T12:24:57.677373+02:00 svr10 sshd[864611]: Invalid user ion from 170.64.139.153 port 36632 ... show less	Brute-Force SSH
Anonymous	2024-04-06 10:09:36 (2 years ago)	Apr 6 09:48:53 de-fra2-dns3 sshd[2590791]: Invalid user dudu from 170.64.139.153 port 50456 Apr 6 09:56:20 de-fra2-dns3 sshd[2591081]: Invalid user user from 170.64.139.153 port 38548 Apr 6 10:09:35 de-fra2-dns3 sshd[2591434]: Invalid user oracle ... show more Apr 6 09:48:53 de-fra2-dns3 sshd[2590791]: Invalid user dudu from 170.64.139.153 port 50456 Apr 6 09:56:20 de-fra2-dns3 sshd[2591081]: Invalid user user from 170.64.139.153 port 38548 Apr 6 10:09:35 de-fra2-dns3 sshd[2591434]: Invalid user oracle from 170.64.139.153 port 33000 ... show less	Brute-Force SSH
🇲🇩 stvnrdg.me	2024-04-06 09:57:02 (2 years ago)	2024-04-05 22:16:50,653 fail2ban.actions [663]: NOTICE [sshd] Ban 170.64.139.153 2024-04-06 09:16:00,112 fail2ban.actions [663]: NOTICE [sshd] Ban 170.64.139.153 2024-04-06 09:57:01,617 fail2ban.actions [663]: NOTICE [sshd] Ba ... show more 2024-04-05 22:16:50,653 fail2ban.actions [663]: NOTICE [sshd] Ban 170.64.139.153 2024-04-06 09:16:00,112 fail2ban.actions [663]: NOTICE [sshd] Ban 170.64.139.153 2024-04-06 09:57:01,617 fail2ban.actions [663]: NOTICE [sshd] Ban 170.64.139.153 ... show less	Brute-Force

Showing 1 to 15 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇭🇰 216.118.231.170

🇭🇰 152.32.172.154

🇫🇷 86.220.3.202

🇵🇱 79.189.73.181

🇺🇸 69.166.109.247

🇫🇮 34.88.34.22

🇺🇸 3.131.24.55

🇰🇷 211.197.62.36

🇦🇲 195.250.79.2

🇩🇪 141.98.102.187

🇿🇦 102.219.27.97

🇺🇸 98.97.8.54

🇩🇪 93.211.112.244

🇩🇪 80.151.14.195

🇳🇱 77.91.71.91

🇦🇷 45.70.10.91

🇱🇻 31.58.79.184

🇮🇩 202.75.28.232

🇯🇵 198.13.57.135

🇺🇸 185.61.218.204