JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 170.64.152.52

170.64.152.52 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 60%: ?

60%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 170.64.152.52

Whois 170.64.152.52

IP Abuse Reports for 170.64.152.52:

This IP address has been reported a total of 65 times from 55 distinct sources. 170.64.152.52 was first reported on November 16th 2022, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 Tripwire	2026-09-17 21:27:57 (22 hours ago)	Scanning for exploits - /wp-json/batch/v1	Web App Attack
🇵🇱 Budyn	2026-09-17 09:27:21 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.astropot.tech \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 Sonoflet	2026-09-17 05:40:58 (1 day ago)	CrowdSec detection \| scenario: http-cve-probing	Web App Attack Exploited Host
🇺🇸 RLDD	2026-09-17 05:39:22 (1 day ago)	WP login attempts -exo	Brute-Force
🇳🇱 EGP Abuse Dept	2026-09-17 05:22:36 (1 day ago)	Scanning for web/db/file exploits on specialsvoordezorg.nl	SQL Injection Bad Web Bot Web App Attack
🇨🇭 YF	2026-09-17 05:07:14 (1 day ago)	WordPress author enumeration	Web App Attack
🇨🇭 backslash	2026-09-17 04:57:01 (1 day ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 OceanTreasure	2026-09-17 04:50:31 (1 day ago)	tcp/80; WordPress wp-login.php probe: "GET /wp-login.php" @ 2026-09-17T04:49:08Z	Web App Attack
🇵🇱 Budyn	2026-09-17 04:47:52 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.astropot.tech \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-09-17 04:45:33 (1 day ago)	2026-09-17 @ 06:45:18 (CET) ~ Blocked for trying to access: /wp-login.php	Web App Attack
🇧🇪 cmbplf	2026-08-23 06:29:45 (3 weeks ago)	1.793 requests with url.path .git/	Brute-Force Bad Web Bot
🇺🇸 Alex Braidwood	2026-03-15 01:40:42 (6 months ago)	Mar 14 21:36:18 thebatforge sshd[1132936]: User root from 170.64.152.52 not allowed because not list ... show more Mar 14 21:36:18 thebatforge sshd[1132936]: User root from 170.64.152.52 not allowed because not listed in AllowUsers Mar 14 21:37:26 thebatforge sshd[1132997]: User root from 170.64.152.52 not allowed because not listed in AllowUsers Mar 14 21:38:32 thebatforge sshd[1133067]: User root from 170.64.152.52 not allowed because not listed in AllowUsers Mar 14 21:39:41 thebatforge sshd[1133210]: User root from 170.64.152.52 not allowed because not listed in AllowUsers Mar 14 21:40:42 thebatforge sshd[1133678]: User root from 170.64.152.52 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Anonymous	2026-03-15 01:38:50 (6 months ago)	2026-03-15T02:37:42.563722+01:00 mail sshd-session[3628746]: Failed password for root from 170.64.15 ... show more 2026-03-15T02:37:42.563722+01:00 mail sshd-session[3628746]: Failed password for root from 170.64.152.52 port 57152 ssh2 2026-03-15T02:38:47.425067+01:00 mail sshd-session[3629329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.152.52 user=root 2026-03-15T02:38:49.763994+01:00 mail sshd-session[3629329]: Failed password for root from 170.64.152.52 port 44876 ssh2 ... show less	Brute-Force SSH
🇺🇸 onemightyarc	2026-03-15 01:37:38 (6 months ago)	2026-03-14T17:36:50.781185-08:00 server.vexstria.pro sshd[2728623]: Failed password for root from 17 ... show more 2026-03-14T17:36:50.781185-08:00 server.vexstria.pro sshd[2728623]: Failed password for root from 170.64.152.52 port 54916 ssh2 2026-03-14T17:37:35.578797-08:00 server.vexstria.pro sshd[2747452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.152.52 user=root 2026-03-14T17:37:37.769082-08:00 server.vexstria.pro sshd[2747452]: Failed password for root from 170.64.152.52 port 57244 ssh2 ... show less	Brute-Force SSH Port Scan FTP Brute-Force
🇺🇸 troublesome	2026-03-15 01:37:36 (6 months ago)	ion	Brute-Force SSH

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.217

🇻🇪 190.89.31.131

🇨🇦 142.120.88.181

🇨🇦 85.217.149.2

🇫🇷 85.217.140.37

🇷🇴 80.94.92.234

🇩🇪 36.255.97.202

🇮🇩 222.124.177.148

🇺🇸 206.248.16.66

🇺🇸 172.237.150.127

🇮🇳 152.32.159.65

🇻🇳 103.200.25.79

🇳🇱 94.154.43.87

🇳🇱 77.239.124.206

🇫🇷 37.60.235.196

🇬🇧 35.203.210.13

🇺🇸 4.249.17.209

🇫🇷 2001:41d0:33a:a00::404

🇻🇪 201.210.142.253

🇺🇸 184.105.247.199