170.64.148.158

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
119 reports
72 reporters · latest 5 months ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Hostname(s)
10d00e5d-f08f-48ec-af8c-15e83bfb2aa3.fs.lucidlink.com
Domain Name
digitalocean.com
Country
🇦🇺 Australia
City
Sydney, New South Wales
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

170.64.148.158 has been reported 119 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
119 from 72 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Petros Stefanakis
(bind) bind triggered by 170.64.148.158 (AU/Australia/-)
Hacking
🇧🇪 boxed-it
GET /.env (Tarpitted for 1d15h8m34s, wasted 8.06MB)
Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-10-31.
Hacking Web App Attack SSH
🇧🇪 boxed-it
GET /.env (Tarpitted for 1d15h8m26s, wasted 8.06MB)
Web App Attack
🇬🇧 Joe-Mark
Found CINS badguys / proto=6 . srcport=39656 . dstport=8000 . (1832)
Port Scan
🇧🇪 sid3windr
GET /.env (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
🇺🇸 MPL
tcp/8000 (6 or more attempts)
Port Scan
🇺🇸 MPL
tcp/8000 (2 or more attempts)
Port Scan
🇯🇵 qwerlancer
tcp/8000 anomaly:
Port Scan
🇭🇰 qwerlancer
tcp/8000 anomaly:
Port Scan
Anonymous
Portscan: TCP/8080 (6x)
Port Scan
🇺🇸 MPL
tcp ports: 8080,8000 (10 or more attempts)
Port Scan
🇺🇸 RAP
2025-11-01 01:10:52 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan Web App Attack
🇬🇧 [email protected]
...
Brute-Force SSH
🇺🇸 MPL
tcp/8080 (6 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 179.43.153.2
🇨🇳 115.231.50.242
🇷🇴 92.118.39.71
🇸🇬 74.81.48.19
🇺🇸 73.12.20.134
🇺🇸 47.251.79.21
🇺🇸 47.251.68.32
🇨🇦 45.198.224.92
🇻🇳 45.119.85.159
🇧🇪 34.38.252.135
🇺🇸 63.135.161.76
🇺🇸 47.251.250.101
🇺🇸 47.251.166.223
🇩🇪 43.228.157.215
🇨🇳 36.152.25.50
🇳🇱 200.138.46.235
🇩🇿 196.20.73.90
🇩🇪 194.88.98.110
🇳🇱 176.65.149.140
🇺🇦 95.46.8.86
feedback