JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

170.64.207.149

Neutral Activity

Abuse Confidence Score

0% Low Risk

17 reports

16 reporters · latest 2 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇦🇺 Australia
City: Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

170.64.207.149 has been reported 17 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

17 from 16 distinct reporters

First reported

March 10th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 鹏鹏	2026-09-12 16:17:36 UTC · (2 months ago)	monitor: on ser162528253480 \| port: 11 \| ttl: 244 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 LotPhantom	2026-09-12 14:45:49 UTC · (2 months ago)	2026-09-12T14:37:18.190850+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=170.64.207.149 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=53028 DPT=1 WINDOW=65535 RES=0 ... show more 2026-09-12T14:37:18.190850+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=170.64.207.149 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=53028 DPT=1 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-12T14:45:48.666585+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=170.64.207.149 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=57484 DPT=2 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇩🇪 xserverx.ru	2026-09-12 14:38:22 UTC · (2 months ago)	[UFW SCAN!!!!] SRC=170.64.207.149 LEN=40 TOS=0x08 PREC=0x40 TTL=232 PROTO=TCP SPT=55810 DPT=1 WINDOW=65535 RES=0x00 SYN URGP=0 ...	Port Scan
🇺🇸 Gabriel Camargo	2026-08-17 19:43:19 UTC · (2 months ago)	170.64.207.149 - - [17/Aug/2026:14:43:16 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 170.64.207.149 - - [17/Aug/2026:14:43:17 -0500] "POS ... show more 170.64.207.149 - - [17/Aug/2026:14:43:16 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 170.64.207.149 - - [17/Aug/2026:14:43:17 -0500] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 170.64.207.149 - - [17/Aug/2026:14:43:18 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇩🇪 rh24	2026-08-17 16:18:50 UTC · (2 months ago)	(wordpress) Failed wordpress login from 170.64.207.149 (AU/Australia/-): (CF_ENABLE)	Brute-Force
🇮🇹 VHosting	2026-08-17 16:15:04 UTC · (2 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-17 16:14:57 UTC · (2 months ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-196)	Hacking
🇵🇱 Budyn	2026-08-17 14:51:56 UTC · (2 months ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.teddypot.store \| URI: /wp-json/batch/v1 \| UA: ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.teddypot.store \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇮🇪 RoboSOC	2026-08-17 12:35:30 UTC · (2 months ago)	WordPress Core author exclude SQL Injection Vulnerability, PTR: PTR record not found	Hacking
🇨🇭 backslash	2026-08-17 10:03:00 UTC · (2 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇵🇱 Budyn	2026-08-17 09:50:08 UTC · (2 months ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.teddypot.online \| URI: /wp-login.php \| UA: Mozilla/5.0 ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.teddypot.online \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 OceanTreasure	2026-08-17 09:50:05 UTC · (2 months ago)	tcp/80; WordPress wp-login.php probe (R21): "GET /wp-login.php" @ 2026-08-17T09:46:43Z	Web App Attack
🇷🇺 slavon	2026-03-10 08:22:36 UTC · (8 months ago)	2026-03-10T11:22:39.912752 www.open-bs.com sshd[3891786]: Failed password for invalid user s7ivan from 170.64.207.149 port 43470 ssh2 2026-03-10T11:22:47.797131 www.open-bs.com sshd[3891978]: Invalid user news from 170.64.207.149 port 53286 2026-03-1 ... show more 2026-03-10T11:22:39.912752 www.open-bs.com sshd[3891786]: Failed password for invalid user s7ivan from 170.64.207.149 port 43470 ssh2 2026-03-10T11:22:47.797131 www.open-bs.com sshd[3891978]: Invalid user news from 170.64.207.149 port 53286 2026-03-10T11:22:48.180974 www.open-bs.com sshd[3891978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.207.149 2026-03-10T11:22:50.382309 www.open-bs.com sshd[3891978]: Failed password for invalid user news from 170.64.207.149 port 53286 ssh2 2026-03-10T11:22:57.687748 www.open-bs.com sshd[3892172]: Invalid user tomcat from 170.64.207.149 port 44500 ... show less	SSH
🇫🇮 bittiguru.fi	2026-03-10 08:22:06 UTC · (8 months ago)	Mar 10 10:21:07 www sshd\[7815\]: Invalid user from 170.64.207.149Mar 10 10:22:01 www sshd\[7841\]: Invalid user hadoop from 170.64.207.149Mar 10 10:22:03 www sshd\[7841\]: Failed password for invalid user hadoop from 170.64.207.149 port 35752 ssh2 ... show more Mar 10 10:21:07 www sshd\[7815\]: Invalid user from 170.64.207.149Mar 10 10:22:01 www sshd\[7841\]: Invalid user hadoop from 170.64.207.149Mar 10 10:22:03 www sshd\[7841\]: Failed password for invalid user hadoop from 170.64.207.149 port 35752 ssh2 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-03-10 08:22:01 UTC · (8 months ago)	SSH bruteforce [BY]	SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 2a03:2880:f37c:22:face:b00c:0:4420

🇸🇬 201.79.109.165

🇨🇴 181.55.180.105

🇨🇱 181.42.18.132

🇩🇪 161.35.194.0

🇳🇬 152.32.141.9

🇫🇮 147.185.133.60

🇳🇱 89.248.168.36

🇩🇪 46.101.101.152

🇴🇲 37.28.30.201

🇺🇸 35.80.15.34

🇬🇧 195.96.139.102

🇬🇧 193.163.125.65

🇦🇷 190.30.73.245

🇧🇷 187.50.226.182

🇧🇷 177.92.54.193

🇧🇩 103.189.11.113

🇺🇸 66.132.186.216

🇺🇸 47.17.144.10

🇬🇧 35.203.210.203