This IP address has been reported a total of
50
times from
40 distinct
sources.
173.70.149.2 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 12
reports;
Germany
with 10
reports;
United Kingdom of Great Britain and Northern Ireland
with 4
reports.
The most common categories in these recent reports were:
Brute-Force
38
times;
SSH
27
times;
Web App Attack
11
times;
Hacking
10
times;
Port Scan
4
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Synology DSM web login brute-force: 17 failed sign-in attempt(s) between 08:46:37 and 17:56:04 CEST ...
show moreSynology DSM web login brute-force: 17 failed sign-in attempt(s) between 08:46:37 and 17:56:04 CEST on 2026-10-06; part of distributed low-and-slow campaign (1000+ IPs).
show less
Automated Synology DSM brute-force login attempts against TCP/5001. Multiple failed authentication a ...
show moreAutomated Synology DSM brute-force login attempts against TCP/5001. Multiple failed authentication attempts were observed and the source was blocked by DiskStation.
show less
Brute-Force
Anonymous
Web directory scan: 10 requests in 1h 43m (Last path: '/webapi/auth.cgi?account=kornelia&api=SYNO.AP ...
show moreWeb directory scan: 10 requests in 1h 43m (Last path: '/webapi/auth.cgi?account=kornelia&api=SYNO.API.Auth&format=sid&method=login&passwd=kornelia&session=FileStation&version=6').
show less
2026-10-04T22:30:40.345430+00:00 instance-20241105-1951 sshd[3167952]: Connection closed by authenti ...
show more2026-10-04T22:30:40.345430+00:00 instance-20241105-1951 sshd[3167952]: Connection closed by authenticating user root 173.70.149.2 port 51963 [preauth]
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
Active SSH brute-force detected. Logs: 2026-10-05T06:05:33.640050+08:00 AVM-273525 sshd-session[1188 ...
show moreActive SSH brute-force detected. Logs: 2026-10-05T06:05:33.640050+08:00 AVM-273525 sshd-session[118899]: Failed password for root from 173.70.149.2 port 64957 ssh2 2026-10-05T06:06:09.193598+08:00 AVM-273525 sshd-session[118920]: pam_unix(sshd:auth): a...
show less
2026-10-04T22:06:17.999693+00:00 instance-20241105-1951 sshd[3167073]: Connection closed by authenti ...
show more2026-10-04T22:06:17.999693+00:00 instance-20241105-1951 sshd[3167073]: Connection closed by authenticating user root 173.70.149.2 port 5100 [preauth]
...
show less
