JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 70.169.21.5

70.169.21.5 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 40%: ?

40%

ISP	Cox Communications
Usage Type	Fixed Line ISP
ASN	AS22773
Hostname(s)	wsip-70-169-21-5.hr.hr.cox.net
Domain Name	cox.com
Country	🇺🇸 United States of America
City	Norfolk, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 70.169.21.5

Whois 70.169.21.5

IP Abuse Reports for 70.169.21.5:

This IP address has been reported a total of 18 times from 14 distinct sources. 70.169.21.5 was first reported on December 15th 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-10-10 08:43:18 (6 days ago)	Form spam	Web Spam
🇩🇪 xavier-momain.eu	2026-10-05 12:23:22 (1 week ago)	CrowdSec ban — scenario: ssh:bruteforce	Brute-Force SSH
🇹🇷 neron	2026-10-02 02:06:42 (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-09-30 20:06:38 (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-28 14:00:53 (2 weeks ago)	Email: Login failures from Bad Reputation IP: 70.169.21.5. Threat Score: 6.1/10 (MEDIUM). Confidence ... show more Email: Login failures from Bad Reputation IP: 70.169.21.5. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-28 13:00:09 (2 weeks ago)	Email: Login failures from Bad Reputation IP: 70.169.21.5. Threat Score: 5.7/10 (MEDIUM). Reported b ... show more Email: Login failures from Bad Reputation IP: 70.169.21.5. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 bigscoots.com	2026-09-23 12:45:34 (3 weeks ago)	70.169.21.5 (US/United States/wsip-70-169-21-5.hr.hr.cox.net), 5 distributed sshd attacks on account ... show more 70.169.21.5 (US/United States/wsip-70-169-21-5.hr.hr.cox.net), 5 distributed sshd attacks on account [user] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 23 06:57:51 14157 sshd[10081]: Invalid user user from 70.169.21.5 port 40784 Sep 23 06:57:52 14157 sshd[10081]: Failed password for invalid user user from 70.169.21.5 port 40784 ssh2 Sep 23 07:15:06 14157 sshd[19526]: Invalid user user from 43.155.202.36 port 35850 Sep 23 07:15:08 14157 sshd[19526]: Failed password for invalid user user from 43.155.202.36 port 35850 ssh2 Sep 23 07:45:24 14157 sshd[3295]: Invalid user user from 67.53.112.182 port 56609 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 ShadowWhisperer	2026-09-20 18:19:45 (3 weeks ago)	abuse - proxy-abuse (SSH port-forward abuse (HTTPS proxy tunnel to external host)) [abuse, proxy, ss ... show more abuse - proxy-abuse (SSH port-forward abuse (HTTPS proxy tunnel to external host)) [abuse, proxy, ssh, ssh-tunnel] show less	Hacking SSH
🇳🇱 Kolo	2026-09-18 06:28:29 (4 weeks ago)	WhoTouchedMySSH honeypot SSH bruteforce from 70.169.21.5 (Norfolk, US)	Brute-Force SSH
🇮🇩 sockominfo	2026-09-17 21:00:53 (4 weeks ago)	Email: Login failures from Bad Reputation IP: 70.169.21.5. Threat Score: 6.2/10 (MEDIUM). Confidence ... show more Email: Login failures from Bad Reputation IP: 70.169.21.5. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-17 20:00:09 (4 weeks ago)	Email: Login failures from Bad Reputation IP: 70.169.21.5. Threat Score: 5.7/10 (MEDIUM). Reported b ... show more Email: Login failures from Bad Reputation IP: 70.169.21.5. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 iNetWorker	2026-09-12 23:15:56 (1 month ago)	pop/imap	Brute-Force
Anonymous	2026-09-07 10:53:55 (1 month ago)	2026-09-07T16:23:52.208123+05:30 vps141554-kxm sshd-session[397791]: pam_unix(sshd:auth): authentica ... show more 2026-09-07T16:23:52.208123+05:30 vps141554-kxm sshd-session[397791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.169.21.5 2026-09-07T16:23:54.154828+05:30 vps141554-kxm sshd-session[397791]: Failed password for invalid user admin from 70.169.21.5 port 59105 ssh2 ... show less	Brute-Force SSH
🇩🇪 NetWatch	2026-09-02 22:26:02 (1 month ago)	The IP 70.169.21.5 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇬🇧 cg-design.co.uk	2026-05-19 00:17:55 (4 months ago)	70.169.21.5 (US/United States/wsip-70-169-21-5.hr.hr.cox.net), 10 distributed imapd attacks on accou ... show more 70.169.21.5 (US/United States/wsip-70-169-21-5.hr.hr.cox.net), 10 distributed imapd attacks on account [redacted] show less	Brute-Force

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 168.144.118.103

🇺🇸 166.70.79.238

🇭🇰 154.92.19.226

🇨🇳 111.22.163.209

🇧🇩 103.112.207.171

🇧🇩 103.58.75.65

🇺🇸 91.230.168.238

🇫🇷 80.87.206.148

🇹🇼 35.236.135.5

🇨🇳 14.103.18.5

🇺🇸 209.38.69.12

🇺🇸 195.184.76.104

🇷🇴 193.32.162.84

🇨🇳 180.76.194.91

🇵🇱 176.53.159.198

🇺🇸 173.239.224.43

🇺🇸 173.239.224.21

🇭🇰 123.58.213.128

🇳🇱 109.160.32.149

🇺🇸 66.132.186.212