AbuseIPDB » 164.92.128.238
164.92.128.238
This IP was reported 8 times. Confidence of
Abuse
is 34% : ?
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪
Germany
City
Frankfurt am Main, Hesse
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 164.92.128.238 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
164.92.128.238 was first reported on
March 3rd 2025 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇵🇱
Budyn
2026-10-21 09:17:35
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.budyn.xyz | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-21 07:33:14
(1 day ago)
[21/Oct/2026:10:33:13 +0300] -- 164.92.128.238 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp- ...
show more
[21/Oct/2026:10:33:13 +0300] -- 164.92.128.238 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-login.php HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇬🇧
venus.launch.bz
2026-10-21 07:30:18
(1 day ago)
(wpscan) WordPress probe detected from 164.92.128.238 (DE/Germany/-)
Hacking
🇫🇷
spot
2026-10-21 07:18:36
(1 day ago)
164.92.128.238 - - [21/Oct/2026:08:18:35 +0100] "GET /wp-login.php HTTP/1.1" 301 608 "-" "Mozilla/5. ...
show more
164.92.128.238 - - [21/Oct/2026:08:18:35 +0100] "GET /wp-login.php HTTP/1.1" 301 608 "-" "Mozilla/5.0"
...
show less
Web App Attack
Hacking
🇵🇱
Budyn
2026-10-21 07:16:49
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.cloud | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
bart@
2026-10-20 09:05:10
(2 days ago)
Automated scan detection against redacted protected targets. Hits=14; port 11211 proto 6 detection h ...
show more
Automated scan detection against redacted protected targets. Hits=14; port 11211 proto 6 detection honeypot_tcp
show less
Port Scan
🇺🇸
TPI-Abuse
2025-03-04 08:36:08
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 164.92.128.238 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 164.92.128.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 03:36:03.245919 2025] [security2:error] [pid 6621:tid 6621] [client 164.92.128.238:54216] [client 164.92.128.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gcigmbh.com"] [uri "/.htaccess"] [unique_id "Z8a7c_rQPPosKj1YfJ3cSgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
spyra.rocks
2025-03-03 22:10:31
(1 year ago)
ModSecurity
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: