JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.148.4

170.64.148.4 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 15%: ?

15%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.148.4

Whois 170.64.148.4

IP Abuse Reports for 170.64.148.4:

This IP address has been reported a total of 24 times from 21 distinct sources. 170.64.148.4 was first reported on March 9th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Petre 21_ip	2026-08-30 13:35:55 (2 days ago)	2026-08-30T15:35:55.066563+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-08-30T15:35:55.066563+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=170.64.148.4 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=TCP SPT=60606 DPT=536 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Axel	2026-08-30 13:28:52 (2 days ago)	Blocked by UFW on LAXHH [536/tcp] \| SPT: 47255 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [536/tcp] \| SPT: 47255 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-08-30 13:28:52 (2 days ago)	Blocked by UFW on LAXHH [536/tcp] \| SPT: 47255 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [536/tcp] \| SPT: 47255 \| TTL: 242 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 thetomtaylor.co.uk	2026-05-05 16:09:02 (3 months ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx01,mx02,mx03,wa01,wa0 ... show more Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx01,mx02,mx03,wa01,wa02] show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-04-27 22:04:10 (4 months ago)	Auto-ban: >3000 req/min op 2026-04-27	Web App Attack SSH Hacking
🇬🇧 thetomtaylor.co.uk	2026-04-27 06:08:02 (4 months ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-04-27 06:00:32 (4 months ago)	WordPress: User enumeration. Pattern match "(author\\\\= (1000-123)	Web App Attack
🇩🇪 bryth	2026-04-27 05:35:51 (4 months ago)	Wordpress login/xmlrpc abuse (Mon Apr 27 05:19:23 AM UTC 2026)	Hacking Web App Attack
🇵🇱 sefinek.net	2026-04-27 04:29:43 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from AU. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from AU. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /wp-login.php \| UA: Mozilla/5.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇧🇷 SOC Blue Team	2026-03-10 11:26:18 (5 months ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇺🇸 ras07	2026-03-09 16:00:29 (5 months ago)	SSH login attempts with user root.	Brute-Force SSH
🇪🇸 gbzret4d	2026-03-09 15:49:20 (5 months ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-slow-bf	Brute-Force SSH
🇫🇷 Xargana	2026-03-09 15:48:18 (5 months ago)	Fail2Ban ban for sshd	Brute-Force SSH
🇩🇪 ITSNF	2026-03-09 15:48:12 (5 months ago)	PBK Mar 9 16:45:15 websrv01 sshd[2593180]: Failed password for root from 170.64.148.4 port 59594 ss ... show more PBK Mar 9 16:45:15 websrv01 sshd[2593180]: Failed password for root from 170.64.148.4 port 59594 ssh2 Mar 9 16:46:42 websrv01 sshd[2593212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.4 user=root Mar 9 16:46:45 websrv01 sshd[2593212]: Failed password for root from 170.64.148.4 port 38744 ssh2 Mar 9 16:48:09 websrv01 sshd[2593260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.4 user=root Mar 9 16:48:11 websrv01 sshd[2593260]: Failed password for root from 170.64.148.4 port 39498 ssh2 show less	Brute-Force SSH
🇳🇱 SchorelWeb	2026-03-09 15:43:42 (5 months ago)	Cluster member (Omitted) (NL/Netherlands/-) said, DENY 170.64.148.4, Reason:[(sshd) Failed SSH login ... show more Cluster member (Omitted) (NL/Netherlands/-) said, DENY 170.64.148.4, Reason:[(sshd) Failed SSH login from 170.64.148.4 (AU/Australia/-): 3 in the last 3600 secs] show less	Brute-Force SSH

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.190.100.10

🇮🇪 104.28.161.208

🇳🇱 94.154.46.246

🇬🇧 35.203.210.236

🇦🇺 202.161.122.159

🇨🇱 201.239.180.98

🇨🇴 186.180.130.170

🇹🇬 154.70.82.240

🇺🇸 147.185.132.48

🇩🇪 130.12.180.43

🇺🇸 107.150.97.10

🇫🇷 91.196.152.191

🇨🇦 85.217.149.73

🇳🇱 81.19.216.76

🇺🇸 70.169.11.216

🇩🇪 69.5.169.98

🇺🇸 65.98.5.196

🇺🇸 65.49.1.43

🇺🇸 45.61.188.129

🇻🇳 42.119.64.119