This IP address has been reported a total of
29
times from
27 distinct
sources.
170.64.148.211 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Mar 15 15:53:24 Debian-1202-bookworm-amd64-base sshd[2093506]: Failed password for root from 170.64. ...
show moreMar 15 15:53:24 Debian-1202-bookworm-amd64-base sshd[2093506]: Failed password for root from 170.64.148.211 port 45510 ssh2
Mar 15 15:54:26 Debian-1202-bookworm-amd64-base sshd[2127108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.211 user=root
Mar 15 15:54:27 Debian-1202-bookworm-amd64-base sshd[2127108]: Failed password for root from 170.64.148.211 port 45222 ssh2
Mar 15 15:55:37 Debian-1202-bookworm-amd64-base sshd[2164387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.211 user=root
Mar 15 15:55:39 Debian-1202-bookworm-amd64-base sshd[2164387]: Failed password for root from 170.64.148.211 port 50590 ssh2
...
show less
2026-03-15T15:53:07.057437chnode7 sshd[3153176]: Failed password for root from 170.64.148.211 port 5 ...
show more2026-03-15T15:53:07.057437chnode7 sshd[3153176]: Failed password for root from 170.64.148.211 port 59616 ssh2
2026-03-15T15:54:10.444786chnode7 sshd[3161650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.211 user=root
2026-03-15T15:54:12.388867chnode7 sshd[3161650]: Failed password for root from 170.64.148.211 port 50102 ssh2
2026-03-15T15:55:20.614972chnode7 sshd[3170278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.211 user=root
2026-03-15T15:55:22.167977chnode7 sshd[3170278]: Failed password for root from 170.64.148.211 port 34368 ssh2
...
show less
Mar 15 22:52:51 kohamotac sshd[4111733]: Failed password for root from 170.64.148.211 port 50780 ssh ...
show moreMar 15 22:52:51 kohamotac sshd[4111733]: Failed password for root from 170.64.148.211 port 50780 ssh2
Mar 15 22:53:54 kohamotac sshd[4112105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.211 user=root
Mar 15 22:53:56 kohamotac sshd[4112105]: Failed password for root from 170.64.148.211 port 55248 ssh2
Mar 15 22:54:57 kohamotac sshd[4112466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.211 user=root
Mar 15 22:54:59 kohamotac sshd[4112466]: Failed password for root from 170.64.148.211 port 42850 ssh2
...
show less
DDoS Attack
Brute-Force
Bad Web Bot
Web App Attack
SSH
2026-03-16T01:50:14.421011+11:00 sleep-salami sshd[96250]: Connection closed by authenticating user ...
show more2026-03-16T01:50:14.421011+11:00 sleep-salami sshd[96250]: Connection closed by authenticating user root 170.64.148.211 port 40108 [preauth]
2026-03-16T01:51:24.090166+11:00 sleep-salami sshd[96263]: Connection closed by authenticating user root 170.64.148.211 port 33268 [preauth]
2026-03-16T01:52:32.825300+11:00 sleep-salami sshd[96271]: Connection closed by authenticating user root 170.64.148.211 port 49486 [preauth]
2026-03-16T01:53:39.025849+11:00 sleep-salami sshd[96277]: Connection closed by authenticating user root 170.64.148.211 port 60548 [preauth]
2026-03-16T01:54:42.650461+11:00 sleep-salami sshd[96282]: Connection closed by authenticating user root 170.64.148.211 port 48798 [preauth]
...
show less
2026-03-15T15:48:55.510368+01:00 gw-de39-01.guestgw.net sshd[1390272]: Connection closed by 170.64.1 ...
show more2026-03-15T15:48:55.510368+01:00 gw-de39-01.guestgw.net sshd[1390272]: Connection closed by 170.64.148.211 port 34940
2026-03-15T15:51:06.467277+01:00 gw-de39-01.guestgw.net sshd[1391009]: Connection closed by authenticating user root 170.64.148.211 port 47508 [preauth]
2026-03-15T15:52:15.029424+01:00 gw-de39-01.guestgw.net sshd[1391346]: Connection closed by authenticating user root 170.64.148.211 port 43904 [preauth]
2026-03-15T15:53:22.303917+01:00 gw-de39-01.guestgw.net sshd[1391683]: Connection closed by authenticating user root 170.64.148.211 port 44418 [preauth]
2026-03-15T15:54:26.605002+01:00 gw-de39-01.guestgw.net sshd[1392044]: Connection closed by authenticating user root 170.64.148.211 port 40902 [preauth]
show less
Brute-Force
Showing 1 to
15
of 29 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩