JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

170.64.141.213

Neutral Activity

Abuse confidence score ?

0% Low Risk

663 reports

188 reporters · latest 6 months ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

170.64.141.213 has been reported 663 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 170.64.141.213

Export CSV

This IP address has been reported a total of 663 times from 188 distinct sources. 170.64.141.213 was first reported on August 3rd 2023, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 brandon.125	2026-03-22 06:09:43 (6 months ago)	SSH brute force attempt (fail2ban rejected)	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-14 20:12:03 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 heyzg	2026-03-14 09:56:16 (6 months ago)	SSH honeypot \| Privilege Escalation + Auth Attempts (Moderate) \| 4 auths (2 users), 20 cmds, 3.4m \| ... show more SSH honeypot \| Privilege Escalation + Auth Attempts (Moderate) \| 4 auths (2 users), 20 cmds, 3.4m \| python_framework \| tactics: remote file download, sudo spray \| URLs: hxxp://130[.]12[.]180[.]179/f/[.]b0s \| ext IPs: 130[.]12[.]180[.]179 show less	Hacking Exploited Host SSH
🇯🇵 Execoop	2026-03-14 09:55:44 (6 months ago)	SSH honeypot \| Privilege Escalation \| 2 auths, 10 cmds, 1.2m \| python_framework \| tactics: remote fi ... show more SSH honeypot \| Privilege Escalation \| 2 auths, 10 cmds, 1.2m \| python_framework \| tactics: remote file download, sudo spray \| URLs: hxxp://130[.]12[.]180[.]179/f/[.]b0s \| ext IPs: 130[.]12[.]180[.]179 show less	Hacking Exploited Host SSH
🇩🇪 heyzg	2026-03-14 09:40:37 (6 months ago)	SSH honeypot \| Privilege Escalation \| 2 auths, 10 cmds, 1.5m \| python_framework \| tactics: remote fi ... show more SSH honeypot \| Privilege Escalation \| 2 auths, 10 cmds, 1.5m \| python_framework \| tactics: remote file download, sudo spray \| URLs: hxxp://130[.]12[.]180[.]179/f/[.]b0s \| ext IPs: 130[.]12[.]180[.]179 show less	Hacking Exploited Host SSH
🇺🇸 Execoop	2026-03-14 09:40:18 (6 months ago)	SSH honeypot \| Privilege Escalation \| 2 auths, 10 cmds, 2.0m \| python_framework \| tactics: remote fi ... show more SSH honeypot \| Privilege Escalation \| 2 auths, 10 cmds, 2.0m \| python_framework \| tactics: remote file download, sudo spray \| URLs: hxxp://130[.]12[.]180[.]179/f/[.]b0s \| ext IPs: 130[.]12[.]180[.]179 show less	Hacking Exploited Host SSH
Anonymous	2026-03-14 09:35:23 (6 months ago)	Mikrotik SYN TCP flood attack	DDoS Attack Port Scan Brute-Force
🇩🇪 acadeova	2026-03-14 09:33:33 (6 months ago)	🚨 Recon detected (nft drop) SRC=170.64.141.213 Observed=TCP dpt=22 in=enp0s6 ttl=52 Time=recent(jour ... show more 🚨 Recon detected (nft drop) SRC=170.64.141.213 Observed=TCP dpt=22 in=enp0s6 ttl=52 Time=recent(journalctl: 10 minutes ago) Assessment=SSH recon (PORT_SCAN+SSH) — treat as brute-force ONLY if repeated SSH auth failures occur show less	Port Scan
🇫🇷 crnpekgoz	2026-03-14 09:29:54 (6 months ago)	[PortScan] Risk=100 ASN=14061 (portscan) Port=22 HoneypotTrap=true \| Reported by WardenIPS: https:// ... show more [PortScan] Risk=100 ASN=14061 (portscan) Port=22 HoneypotTrap=true \| Reported by WardenIPS: https://github.com/msncakma/WardenIPS show less	Port Scan
🇵🇱 Kitki30.com	2026-03-14 09:26:09 (6 months ago)	Entered SSH Tarpit (endlessh). Log: 2026-03-14T09:26:08.571Z ACCEPT host=::ffff:170.64.141.213 port= ... show more Entered SSH Tarpit (endlessh). Log: 2026-03-14T09:26:08.571Z ACCEPT host=::ffff:170.64.141.213 port=34108 fd=81 n=81/4096 show less	Brute-Force SSH Port Scan
🇵🇱 axiomofchoice.xyz	2026-03-14 09:26:09 (6 months ago)	endlessh trap: attempts=1 total_time_stuck=20.028s	Port Scan SSH Hacking
🇩🇪 Axel	2026-03-14 09:26:08 (6 months ago)	[2026-03-14 09:26:08 UTC] Honeypot SSH connection attempt \| AXFRA HONEYPOT	SSH
🇺🇸 Cyber Crusader	2026-03-14 02:27:17 (6 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇹🇷 rtbh.com.tr	2026-03-13 20:12:02 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇯🇵 k725	2026-03-12 23:12:53 (6 months ago)	2026-03-12T23:04:57.525608+00:00 instance-20250416-2307 sshd-session[2781954]: Invalid user apache f ... show more 2026-03-12T23:04:57.525608+00:00 instance-20250416-2307 sshd-session[2781954]: Invalid user apache from 170.64.141.213 port 56530 2026-03-12T23:05:31.715742+00:00 instance-20250416-2307 sshd-session[2781961]: Invalid user apache from 170.64.141.213 port 54266 2026-03-12T23:06:05.777965+00:00 instance-20250416-2307 sshd-session[2781964]: Invalid user apache from 170.64.141.213 port 47474 2026-03-12T23:06:39.403054+00:00 instance-20250416-2307 sshd-session[2781968]: Invalid user apache from 170.64.141.213 port 48460 2026-03-12T23:12:52.469714+00:00 instance-20250416-2307 sshd-session[2782036]: Invalid user centos from 170.64.141.213 port 35704 ... show less	Brute-Force SSH

Showing 1 to 15 of 663 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 194.180.49.77

🇳🇱 185.136.15.12

🇺🇸 104.143.77.9

🇫🇷 82.102.18.190

🇺🇸 68.47.220.26

🇷🇺 62.122.195.14

🇳🇱 57.153.203.144

🇺🇸 18.119.209.50

🇸🇪 217.211.208.125

🇳🇱 193.47.62.69

🇺🇸 165.227.60.209

🇩🇪 136.243.228.178

🇺🇸 136.108.173.22

🇸🇬 129.226.153.214

🇲🇦 105.72.221.223

🇫🇷 91.231.89.190

🇮🇷 87.107.195.51

🇦🇹 81.10.136.15

🇺🇸 52.165.83.239

🇮🇳 49.206.27.37