AbuseIPDB » 66.70.176.28

66.70.176.28 was found in our database!

This IP was reported 5,129 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH Hosting Inc.
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ns544811.ip-66-70-176.net
Domain Name	ovh.com
Country	Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 66.70.176.28

Whois 66.70.176.28

IP Abuse Reports for 66.70.176.28:

This IP address has been reported a total of 5,129 times from 873 distinct sources. 66.70.176.28 was first reported on August 16th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	10 Sep 2023	Jul 15 02:02:08 bongen-tmp-rt.local sshd[4164779]: Connection closed by authenticating user root 66. ... show moreJul 15 02:02:08 bongen-tmp-rt.local sshd[4164779]: Connection closed by authenticating user root 66.70.176.28 port 40504 [preauth] Jul 15 02:02:08 bongen-tmp-rt.local sshd[4164781]: Connection closed by authenticating user root 66.70.176.28 port 40514 [preauth] Jul 15 02:02:09 bongen-tmp-rt.local sshd[4164783]: Connection closed by authenticating user root 66.70.176.28 port 40518 [preauth] Jul 15 02:02:10 bongen-tmp-rt.local sshd[4164785]: Connection closed by authenticating user root 66.70.176.28 port 40522 [preauth] Jul 15 02:02:10 bongen-tmp-rt.local sshd[4164788]: Connection closed by authenticating user root 66.70.176.28 port 40524 [preauth] show less	Brute-Force
ipcop.net	10 Sep 2023	Jul 15 02:02:08 bongen-tmp-rt.local sshd[4164779]: Connection closed by authenticating user root 66. ... show moreJul 15 02:02:08 bongen-tmp-rt.local sshd[4164779]: Connection closed by authenticating user root 66.70.176.28 port 40504 [preauth] Jul 15 02:02:08 bongen-tmp-rt.local sshd[4164781]: Connection closed by authenticating user root 66.70.176.28 port 40514 [preauth] Jul 15 02:02:09 bongen-tmp-rt.local sshd[4164783]: Connection closed by authenticating user root 66.70.176.28 port 40518 [preauth] Jul 15 02:02:10 bongen-tmp-rt.local sshd[4164785]: Connection closed by authenticating user root 66.70.176.28 port 40522 [preauth] Jul 15 02:02:10 bongen-tmp-rt.local sshd[4164788]: Connection closed by authenticating user root 66.70.176.28 port 40524 [preauth] show less	Brute-Force
ipcop.net	10 Sep 2023	Jul 15 02:02:08 bongen-tmp-rt.local sshd[4164779]: Connection closed by authenticating user root 66. ... show moreJul 15 02:02:08 bongen-tmp-rt.local sshd[4164779]: Connection closed by authenticating user root 66.70.176.28 port 40504 [preauth] Jul 15 02:02:08 bongen-tmp-rt.local sshd[4164781]: Connection closed by authenticating user root 66.70.176.28 port 40514 [preauth] Jul 15 02:02:09 bongen-tmp-rt.local sshd[4164783]: Connection closed by authenticating user root 66.70.176.28 port 40518 [preauth] Jul 15 02:02:10 bongen-tmp-rt.local sshd[4164785]: Connection closed by authenticating user root 66.70.176.28 port 40522 [preauth] Jul 15 02:02:10 bongen-tmp-rt.local sshd[4164788]: Connection closed by authenticating user root 66.70.176.28 port 40524 [preauth] show less	Brute-Force
ipcop.net	10 Sep 2023	Jul 14 20:39:50 gw2.wira-gmbh.de sshd[304558]: Connection closed by authenticating user root 66.70.1 ... show moreJul 14 20:39:50 gw2.wira-gmbh.de sshd[304558]: Connection closed by authenticating user root 66.70.176.28 port 50928 [preauth] Jul 14 20:39:51 gw2.wira-gmbh.de sshd[304561]: Connection closed by authenticating user root 66.70.176.28 port 50944 [preauth] Jul 14 20:39:52 gw2.wira-gmbh.de sshd[304563]: Connection closed by authenticating user root 66.70.176.28 port 50956 [preauth] Jul 14 20:39:52 gw2.wira-gmbh.de sshd[304565]: Connection closed by authenticating user root 66.70.176.28 port 50962 [preauth] Jul 14 20:39:53 gw2.wira-gmbh.de sshd[304567]: Connection closed by authenticating user root 66.70.176.28 port 47458 [preauth] show less	Brute-Force
ipcop.net	10 Sep 2023	Jul 14 20:39:50 gw2.wira-gmbh.de sshd[304558]: Connection closed by authenticating user root 66.70.1 ... show moreJul 14 20:39:50 gw2.wira-gmbh.de sshd[304558]: Connection closed by authenticating user root 66.70.176.28 port 50928 [preauth] Jul 14 20:39:51 gw2.wira-gmbh.de sshd[304561]: Connection closed by authenticating user root 66.70.176.28 port 50944 [preauth] Jul 14 20:39:52 gw2.wira-gmbh.de sshd[304563]: Connection closed by authenticating user root 66.70.176.28 port 50956 [preauth] Jul 14 20:39:52 gw2.wira-gmbh.de sshd[304565]: Connection closed by authenticating user root 66.70.176.28 port 50962 [preauth] Jul 14 20:39:53 gw2.wira-gmbh.de sshd[304567]: Connection closed by authenticating user root 66.70.176.28 port 47458 [preauth] show less	Brute-Force
ipcop.net	10 Sep 2023	Jul 14 20:39:50 gw2.wira-gmbh.de sshd[304558]: Connection closed by authenticating user root 66.70.1 ... show moreJul 14 20:39:50 gw2.wira-gmbh.de sshd[304558]: Connection closed by authenticating user root 66.70.176.28 port 50928 [preauth] Jul 14 20:39:51 gw2.wira-gmbh.de sshd[304561]: Connection closed by authenticating user root 66.70.176.28 port 50944 [preauth] Jul 14 20:39:52 gw2.wira-gmbh.de sshd[304563]: Connection closed by authenticating user root 66.70.176.28 port 50956 [preauth] Jul 14 20:39:52 gw2.wira-gmbh.de sshd[304565]: Connection closed by authenticating user root 66.70.176.28 port 50962 [preauth] Jul 14 20:39:53 gw2.wira-gmbh.de sshd[304567]: Connection closed by authenticating user root 66.70.176.28 port 47458 [preauth] show less	Brute-Force
ipcop.net	08 Sep 2023	Malicious activity detected from 66.70.176.28.	Brute-Force
ipcop.net	08 Sep 2023	Jul 14 01:01:06 cti1.cti.srvfarm.net sshd[1331923]: Connection closed by authenticating user root 66 ... show moreJul 14 01:01:06 cti1.cti.srvfarm.net sshd[1331923]: Connection closed by authenticating user root 66.70.176.28 port 59102 [preauth] Jul 14 01:01:07 cti1.cti.srvfarm.net sshd[1331925]: Connection closed by authenticating user root 66.70.176.28 port 59118 [preauth] Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331931]: Invalid user oracle from 66.70.176.28 port 59120 Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331931]: Connection closed by invalid user oracle 66.70.176.28 port 59120 [preauth] Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331933]: Invalid user oracle from 66.70.176.28 port 59500 show less	Brute-Force
ipcop.net	08 Sep 2023	Jul 14 01:01:06 cti1.cti.srvfarm.net sshd[1331923]: Connection closed by authenticating user root 66 ... show moreJul 14 01:01:06 cti1.cti.srvfarm.net sshd[1331923]: Connection closed by authenticating user root 66.70.176.28 port 59102 [preauth] Jul 14 01:01:07 cti1.cti.srvfarm.net sshd[1331925]: Connection closed by authenticating user root 66.70.176.28 port 59118 [preauth] Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331931]: Invalid user oracle from 66.70.176.28 port 59120 Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331931]: Connection closed by invalid user oracle 66.70.176.28 port 59120 [preauth] Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331933]: Invalid user oracle from 66.70.176.28 port 59500 show less	Brute-Force
ipcop.net	08 Sep 2023	Jul 14 01:01:06 cti1.cti.srvfarm.net sshd[1331923]: Connection closed by authenticating user root 66 ... show moreJul 14 01:01:06 cti1.cti.srvfarm.net sshd[1331923]: Connection closed by authenticating user root 66.70.176.28 port 59102 [preauth] Jul 14 01:01:07 cti1.cti.srvfarm.net sshd[1331925]: Connection closed by authenticating user root 66.70.176.28 port 59118 [preauth] Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331931]: Invalid user oracle from 66.70.176.28 port 59120 Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331931]: Connection closed by invalid user oracle 66.70.176.28 port 59120 [preauth] Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331933]: Invalid user oracle from 66.70.176.28 port 59500 show less	Brute-Force
ipcop.net	08 Sep 2023	Jul 14 01:01:06 cti1.cti.srvfarm.net sshd[1331923]: Connection closed by authenticating user root 66 ... show moreJul 14 01:01:06 cti1.cti.srvfarm.net sshd[1331923]: Connection closed by authenticating user root 66.70.176.28 port 59102 [preauth] Jul 14 01:01:07 cti1.cti.srvfarm.net sshd[1331925]: Connection closed by authenticating user root 66.70.176.28 port 59118 [preauth] Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331931]: Invalid user oracle from 66.70.176.28 port 59120 Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331931]: Connection closed by invalid user oracle 66.70.176.28 port 59120 [preauth] Jul 14 01:01:08 cti1.cti.srvfarm.net sshd[1331933]: Invalid user oracle from 66.70.176.28 port 59500 show less	Brute-Force
Anonymous	28 Aug 2023	2023-08-27T22:50:59.376527 SPARTAN sshd[3011]: Invalid user user from 66.70.176.28 port 36072 ... show more2023-08-27T22:50:59.376527 SPARTAN sshd[3011]: Invalid user user from 66.70.176.28 port 36072 2023-08-27T22:50:59.386373 SPARTAN sshd[3011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns544811.ip-66-70-176.net 2023-08-27T22:51:00.724030 SPARTAN sshd[3011]: Failed password for invalid user user from 66.70.176.28 port 36072 ssh2 2023-08-27T22:51:00.843675 SPARTAN sshd[3013]: Invalid user guest from 66.70.176.28 port 36078 ... show less	Brute-Force SSH
ThreatBook.io	28 Aug 2023	ThreatBook Intelligence: Brute Force,Spam more details on https://threatbook.io/ip/66.70.176.28	SSH
Nick Solo	27 Aug 2023	Aug 27 13:22:58 ubuntu sshd[833248]: Failed password for invalid user user from 66.70.176.28 port 42 ... show moreAug 27 13:22:58 ubuntu sshd[833248]: Failed password for invalid user user from 66.70.176.28 port 42986 ssh2 Aug 27 13:22:59 ubuntu sshd[834052]: Invalid user guest from 66.70.176.28 port 55622 Aug 27 13:22:59 ubuntu sshd[834052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.176.28 Aug 27 13:23:02 ubuntu sshd[834052]: Failed password for invalid user guest from 66.70.176.28 port 55622 ssh2 Aug 27 13:23:03 ubuntu sshd[835913]: Invalid user test from 66.70.176.28 port 55634 ... show less	Brute-Force SSH
ASPAN	27 Aug 2023	Unsolicited connection attempt(s), port:22.	Port Scan

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩