JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.149.69

170.64.149.69 was found in our database!

This IP was reported 329 times. Confidence of Abuse is 6%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.149.69

Whois 170.64.149.69

IP Abuse Reports for 170.64.149.69:

This IP address has been reported a total of 329 times from 115 distinct sources. 170.64.149.69 was first reported on July 21st 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-13 08:33:12 (1 month ago)	(wordpress) Failed wordpress login from 170.64.149.69 (AU/Australia/-)	Brute-Force
🇦🇺 screwlooseit.com.au	2026-04-13 07:09:41 (1 month ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇨🇳 ThreatBook.io	2026-03-17 01:41:12 (2 months ago)	2026-03-16 15:49:37 ["uname -s -v -n -r -m"]	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-16 20:12:05 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇿 lp	2026-03-16 08:56:20 (2 months ago)	SSH Brute force: 1 attempts were recorded from 170.64.149.69 2026-03-16T08:45:18+01:00 Connection cl ... show more SSH Brute force: 1 attempts were recorded from 170.64.149.69 2026-03-16T08:45:18+01:00 Connection closed by authenticating user root 170.64.149.69 port 54120 [preauth] show less	Brute-Force SSH
🇧🇷 KingHost	2026-03-16 08:26:26 (2 months ago)		Brute-Force
🇩🇪 ghostwarriors	2026-03-16 07:50:52 (2 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇨🇦 hpg	2026-03-16 07:50:29 (2 months ago)	26 invalid SSH login attempts from 170.64.149.69 in the last 0.1 hours	Brute-Force SSH
🇨🇦 nickto	2026-03-16 07:48:08 (2 months ago)	Mar 16 03:47:56 Tower sshd-session[2125792]: Connection from 170.64.149.69 port 33178 on 192.168.10. ... show more Mar 16 03:47:56 Tower sshd-session[2125792]: Connection from 170.64.149.69 port 33178 on 192.168.10.220 port 22 rdomain "" Mar 16 03:48:00 Tower sshd-session[2125792]: Failed password for root from 170.64.149.69 port 33178 ssh2 Mar 16 03:48:00 Tower sshd-session[2125792]: Connection closed by authenticating user root 170.64.149.69 port 33178 [preauth] Mar 16 03:48:00 Tower sshd[3583]: srclimit_penalise: ipv4: new 170.64.149.69/32 deferred penalty of 5 seconds for penalty: failed authentication Mar 16 03:48:04 Tower sshd-session[2127579]: Connection from 170.64.149.69 port 48236 on 192.168.10.220 port 22 rdomain "" show less	Brute-Force SSH
🇵🇱 IROK	2026-03-16 07:47:43 (2 months ago)	2026-03-16T08:47:31.734732 pclab24.pl sshd[957061]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-03-16T08:47:31.734732 pclab24.pl sshd[957061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.149.69 2026-03-16T08:47:33.932697 pclab24.pl sshd[957061]: Failed password for invalid user elasticsearch from 170.64.149.69 port 46430 ssh2 2026-03-16T08:47:37.773936 pclab24.pl sshd[957078]: Invalid user ftpadmin from 170.64.149.69 port 44884 2026-03-16T08:47:39.337201 pclab24.pl sshd[957078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.149.69 2026-03-16T08:47:41.298200 pclab24.pl sshd[957078]: Failed password for invalid user ftpadmin from 170.64.149.69 port 44884 ssh2 ... show less	SSH
🇺🇸 yzfdude1	2026-03-16 07:47:34 (2 months ago)	Mar 16 01:47:31 b146-40 sshd[139593]: Invalid user elasticsearch from 170.64.149.69 port 46510 Mar 1 ... show more Mar 16 01:47:31 b146-40 sshd[139593]: Invalid user elasticsearch from 170.64.149.69 port 46510 Mar 16 01:47:31 b146-40 sshd[139593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.149.69 Mar 16 01:47:33 b146-40 sshd[139593]: Failed password for invalid user elasticsearch from 170.64.149.69 port 46510 ssh2 ... show less	Brute-Force SSH
🇩🇪 ps-center	2026-03-16 07:44:16 (2 months ago)	C1-W: TCP-Scanner. Port: 22	Port Scan
🇩🇪 acadeova	2026-03-01 20:59:23 (3 months ago)	🚨 Recon detected (nft drop) SRC=170.64.149.69 Observed=TCP dpt=22 in=enp0s6 ttl=52 Time=recent(journ ... show more 🚨 Recon detected (nft drop) SRC=170.64.149.69 Observed=TCP dpt=22 in=enp0s6 ttl=52 Time=recent(journalctl: 10 minutes ago) Assessment=SSH recon (PORT_SCAN+SSH) — treat as brute-force ONLY if repeated SSH auth failures occur show less	Port Scan
🇺🇸 jdellamorte	2026-03-01 16:08:01 (3 months ago)	SSH honeypot (Cowrie) attack detected. // Attack phases: system recon, malware deployment, competing ... show more SSH honeypot (Cowrie) attack detected. // Attack phases: system recon, malware deployment, competing miner removal, malware drop. // HASSH: 2ec37a7cc8daf20b10e1ad6221061ca5 // SSH client: SSH-2.0-Go // Auth: 4 attempts (4 success, 0 failed). // Creds: root/password \| zabbix/12 \| centos/password // Post-exploit: export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH a ; echo $HOME ; echo '12' \| sudo -S bash -c 'chmod +x '"'"'/root/.b0s'"'"'' \|\| bash -c 'chmod +x // Files dropped: /root/.b0s // SHA256: 78d57c0ca432ba6f2ccd7d28f974c84866d80dc1703201e4551793e1f4f0eb89 // Malware ID (YARA): Dot16_XMRig [high]: XMRig miner with RandomX JIT — deployed as .16/.b0s/.X0-lock by Dot16 actor show less	Brute-Force SSH
🇳🇿 Antinson	2026-02-08 12:12:58 (4 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot

Showing 1 to 15 of 329 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 34.174.38.106

🇮🇳 202.9.122.212

🇪🇹 196.189.224.253

🇮🇳 103.40.202.99

🇧🇷 45.205.1.71

🇨🇳 36.34.234.89

🇩🇪 34.185.145.80

🇷🇴 2.57.122.238

🇨🇦 217.181.83.42

🇧🇷 205.210.31.222

🇺🇸 172.172.170.199

🇭🇰 101.36.110.201

🇧🇪 34.53.158.15

🇺🇸 20.102.100.198

🇨🇳 2404:c2c0:8f41:ef02:9210:8d70:384f:6c10

🇷🇺 178.206.240.43

🇨🇳 118.31.188.56

🇳🇱 89.222.112.103

🇺🇸 67.241.132.98

🇩🇪 2.26.252.159