JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

170.64.148.24

Neutral Activity

Abuse Confidence Score

0% Low Risk

42 reports

27 reporters · latest 1 month ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇦🇺 Australia
City: Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

42 from 27 distinct reporters

First reported

November 29th 2024

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1

Most common categories Web App Attack 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 foxxelabs	2026-10-11 07:17:42 UTC · (1 month ago)	Automated report from FoxxeLabs Sentinel. Path probed: /wp-login.php \| Project: anseo \| Reason(s): Known exploit path: /wp-login.php \| User-Agent: Mozilla/5.0	Web App Attack
🇧🇷 KingHost	2026-03-14 20:57:29 UTC · (7 months ago)		Brute-Force
🇩🇪 onlyops.app	2026-03-14 20:00:20 UTC · (7 months ago)	Brute-force login attempts on SSH \| detected by Fail2Ban (ssh jail) \| onlyops.app	Brute-Force
Anonymous	2026-03-14 19:11:06 UTC · (7 months ago)	2026-03-14T22:08:56.794615+03:00 main sshd-session[559351]: Connection closed by authenticating user root 170.64.148.24 port 41730 [preauth] 2026-03-14T22:10:59.693100+03:00 main sshd-session[559991]: Invalid user 0000 from 170.64.148.24 port 60320 2 ... show more 2026-03-14T22:08:56.794615+03:00 main sshd-session[559351]: Connection closed by authenticating user root 170.64.148.24 port 41730 [preauth] 2026-03-14T22:10:59.693100+03:00 main sshd-session[559991]: Invalid user 0000 from 170.64.148.24 port 60320 2026-03-14T22:11:00.578291+03:00 main sshd-session[559991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.24 2026-03-14T22:11:03.242641+03:00 main sshd-session[559991]: Failed password for invalid user 0000 from 170.64.148.24 port 60320 ssh2 2026-03-14T22:11:05.613894+03:00 main sshd-session[559991]: Connection closed by invalid user 0000 170.64.148.24 port 60320 [preauth] ... show less	Brute-Force SSH
🇪🇸 Datenautobahn	2026-03-14 19:11:03 UTC · (7 months ago)	2026-03-14T19:10:59.393749+00:00 es1 sshd-session[81405]: Invalid user 0000 from 170.64.148.24 port 47788 2026-03-14T19:11:00.323507+00:00 es1 sshd-session[81405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... show more 2026-03-14T19:10:59.393749+00:00 es1 sshd-session[81405]: Invalid user 0000 from 170.64.148.24 port 47788 2026-03-14T19:11:00.323507+00:00 es1 sshd-session[81405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.24 2026-03-14T19:11:02.680357+00:00 es1 sshd-session[81405]: Failed password for invalid user 0000 from 170.64.148.24 port 47788 ssh2 ... show less	Brute-Force SSH
🇺🇸 RAP	2026-03-14 19:08:20 UTC · (7 months ago)	2026-03-14 19:08:20 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇩🇪 Admins@FBN	2026-03-12 00:01:50 UTC · (8 months ago)	FW-PortScan: Traffic Blocked srcport=49324 dstport=22	Port Scan Hacking SSH
🇺🇸 MPL	2026-03-11 23:47:13 UTC · (8 months ago)	tcp/22	Port Scan
🇫🇷 Pythagus	2025-09-05 00:11:26 UTC · (1 year ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇩🇪 updown.io	2025-09-04 10:45:19 UTC · (1 year ago)	{"level":"info","ts":1756981628.5072975,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"170.64.148.24","remote_port":"52168","client_ip":"170.64.148.24","proto":"HTTP/1.1","method":"GET","host":"www-tpe.gpr8.status.upd ... show more {"level":"info","ts":1756981628.5072975,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"170.64.148.24","remote_port":"52168","client_ip":"170.64.148.24","proto":"HTTP/1.1","method":"GET","host":"www-tpe.gpr8.status.updown.io","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (X11; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0"],"Connection":["close"],"Accept":["/"],"Accept-Language":["en"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.00004721,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://www-tpe.gpr8.status.updown.io/"],"Content-Type":[]}} {"level":"info","ts":1756981632.9442322,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"170.64.148.24","remote_port":"52188","client_ip":"170.64.148.24","proto":"HTTP/1.1","method":"GET","host":"www-z.nj9d.status.updown.io","uri":"/","headers":{"Connection":["close"],"Accept":["/"],"Accept-Language":[" ... show less	DDoS Attack Web App Attack
🇷🇴 abuse_IP_reporter	2025-09-03 17:45:05 UTC · (1 year ago)	Sep 3 20:40:32 server UFW BLOCK SRC=170.64.148.24 DF PROTO=TCP SPT=8152	Port Scan
🇲🇾 syokadmin	2025-08-30 07:12:23 UTC · (1 year ago)	170.64.148.24 (AU/Australia/-), more than 2 Apache 403 hits in the last 3600 secs	Brute-Force
🇺🇸 TPI-Abuse	2025-08-28 18:37:19 UTC · (1 year ago)	(mod_security) mod_security (id:210350) triggered by 170.64.148.24 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 28 14:37:12.366146 2025] [security2:error] [pid 22500:tid 22525] [client 170.64.148.24:43078] M ... show more (mod_security) mod_security (id:210350) triggered by 170.64.148.24 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 28 14:37:12.366146 2025] [security2:error] [pid 22500:tid 22525] [client 170.64.148.24:43078] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|schedule.stonyp.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "schedule.stonyp.com"] [uri "/"] [unique_id "aLCh2FqwaDJBw5MeykezWwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Roper123	2025-08-28 04:44:47 UTC · (1 year ago)	Web app exploits	Web App Attack
🇩🇪 updown.io	2025-08-27 04:02:44 UTC · (1 year ago)	{"level":"info","ts":1756265163.106737,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"170.64.148.24","remote_port":"14096","client_ip":"170.64.148.24","proto":"HTTP/1.1","method":"GET","host":"a.wwwwildcard.kornspitz. ... show more {"level":"info","ts":1756265163.106737,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"170.64.148.24","remote_port":"14096","client_ip":"170.64.148.24","proto":"HTTP/1.1","method":"GET","host":"a.wwwwildcard.kornspitz.co.at.x-66zp.status.updown.io","uri":"/","headers":{"Accept":["/"],"Accept-Language":["en"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000074689,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://a.wwwwildcard.kornspitz.co.at.x-66zp.status.updown.io/"],"Content-Type":[]}} {"level":"info","ts":1756265163.2528045,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"170.64.148.24","remote_port":"14110","client_ip":"170.64.148.24","proto":"HTTP/1.1","method":"GET","host":"a.wwwwildcard.kornspitz.co.at.x-66zp.status.updown.io","uri":" ... show less	DDoS Attack Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 165.154.172.111

🇮🇩 157.85.210.127

🇨🇳 119.183.19.126

🇳🇱 86.38.187.165

🇺🇸 70.167.234.161

🇧🇷 69.6.222.101

🇺🇸 35.224.210.170

🇺🇸 205.210.31.80

🇺🇸 192.190.221.7

🇹🇷 188.119.7.143

🇱🇧 185.104.71.202

🇭🇰 165.154.6.112

🇺🇸 52.20.198.190

🇮🇳 34.131.78.98

🇺🇸 2604:4500:8:2c0:1c00:a2ff:fe00:1589

🇧🇷 200.151.21.198

🇹🇳 197.3.248.40

🇹🇹 181.118.47.67

🇺🇸 172.71.23.55

🇸🇬 162.158.108.13