Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
170.64.148.52 has been reported 40
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
SSH Brute force: 1 attempts were recorded from 170.64.148.52
2026-03-14T19:25:13+01:00 Connection closed by authenticating user root 170.64.148.52 port 48316 [preauth]
Mar 14 18:27:21 dabeau sshd[30351]: Invalid user 0000 from 170.64.148.52 port 45508
Mar 14 18:27:21 dabeau sshd[30351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.52
Mar 14 18:27:23 dabeau sshd ...
show moreMar 14 18:27:21 dabeau sshd[30351]: Invalid user 0000 from 170.64.148.52 port 45508
Mar 14 18:27:21 dabeau sshd[30351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.148.52
Mar 14 18:27:23 dabeau sshd[30351]: Failed password for invalid user 0000 from 170.64.148.52 port 45508 ssh2
...
show less
2026-03-14T19:25:17.367279+01:00 euve sshd-session[90270]: Failed password for root from 170.64.148.52 port 50132 ssh2
2026-03-14T19:25:17.760613+01:00 euve sshd-session[90270]: Connection closed by authenticating user root 170.64.148.52 port 50132 [ ...
show more2026-03-14T19:25:17.367279+01:00 euve sshd-session[90270]: Failed password for root from 170.64.148.52 port 50132 ssh2
2026-03-14T19:25:17.760613+01:00 euve sshd-session[90270]: Connection closed by authenticating user root 170.64.148.52 port 50132 [preauth]
2026-03-14T19:27:21.209917+01:00 euve sshd-session[90946]: Invalid user 0000 from 170.64.148.52 port 60550
...
show less
Attempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution.
170.64.148.52 - - [31/Oct/2025:14:19:53 +0000] "GE ...
show moreAttempt to access invalid virtual host name (###.###.###.###). Typically used to access "internal" resources improperly exposed externally and "protected" only by a lack of external DNS resolution.
170.64.148.52 - - [31/Oct/2025:14:19:53 +0000] "GET /+CSCOL+/Java.jar HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-"
show less
Hacking
Anonymous
(mod_security) mod_security (id:920350) triggered by 170.64.148.52 (AU/Australia/-): 1 in the last 3600 secs
Brute-Force
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown