JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.130.209

164.92.130.209 was found in our database!

This IP was reported 102 times. Confidence of Abuse is 41%: ?

41%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.130.209

Whois 164.92.130.209

IP Abuse Reports for 164.92.130.209:

This IP address has been reported a total of 102 times from 70 distinct sources. 164.92.130.209 was first reported on May 16th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 celestialcity	2026-06-09 01:10:14 (2 days ago)	Blocked by UFW on celestialcityeu [1883/tcp] \| SPT: 61003 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityeu [1883/tcp] \| SPT: 61003 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-09 00:59:26 (2 days ago)	tcp/6936	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-09 00:44:26 (2 days ago)	Honeypot hit: HTTP/1.1 request on 9000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKi ... show more Honeypot hit: HTTP/1.1 request on 9000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 9000 [2] TCP show less	Web App Attack
🇨🇦 Roper123	2026-06-06 14:47:39 (4 days ago)	Web exploits	Hacking Web App Attack
Anonymous	2026-06-01 23:05:40 (1 week ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (17/60 min)'; Requests=17	Port Scan
🇯🇵 mkaraki	2026-05-14 19:20:20 (3 weeks ago)	1778786418 # Service_probe # SIGNATURE_SEND # source_ip:164.92.130.209 # dst_port:18789 ...	Port Scan
🇪🇸 helix	2026-03-24 05:12:06 (2 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇪🇸 helix	2026-03-10 05:47:28 (3 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-05 20:11:54 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇵🇱 IROK	2026-03-05 11:19:52 (3 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇩🇪 SiyCah	2026-03-05 04:00:02 (3 months ago)	164.92.130.209 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 164.92.130.209 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 363B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇺🇸 sh97	2026-03-05 00:56:31 (3 months ago)	US912-CCN.idler: SSH Brute Force from 164.92.130.209 at 2026-03-05 04:56:31 +04	Brute-Force SSH
🇺🇸 Anybody9975	2026-03-04 18:59:59 (3 months ago)	266 SSH login attempts on 2026-03-04	Brute-Force SSH
🇨🇭 TrainerGamer	2026-03-04 17:19:47 (3 months ago)	Mar 4 09:18:53 LU-VPS01 sshd[22581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Mar 4 09:18:53 LU-VPS01 sshd[22581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.130.209 Mar 4 09:18:55 LU-VPS01 sshd[22581]: Failed password for invalid user postgres from 164.92.130.209 port 49592 ssh2 Mar 4 09:19:46 LU-VPS01 sshd[22611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.130.209 ... show less	Brute-Force SSH
🇺🇸 dankmemer3920	2026-03-04 17:19:01 (3 months ago)	2026-03-04T17:18:04.249979+00:00 panel sshd[565331]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-03-04T17:18:04.249979+00:00 panel sshd[565331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.130.209 2026-03-04T17:18:06.124124+00:00 panel sshd[565331]: Failed password for invalid user postgres from 164.92.130.209 port 36624 ssh2 2026-03-04T17:18:57.709632+00:00 panel sshd[576808]: Invalid user postgres from 164.92.130.209 port 36580 2026-03-04T17:18:58.164232+00:00 panel sshd[576808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.130.209 2026-03-04T17:19:00.454391+00:00 panel sshd[576808]: Failed password for invalid user postgres from 164.92.130.209 port 36580 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 153.0.48.62

🇺🇸 44.223.116.180

🇸🇬 43.134.27.11

🇺🇸 195.184.76.142

🇺🇸 165.227.109.178

🇮🇩 160.25.237.138

🇫🇮 147.185.133.186

🇺🇸 104.243.35.45

🇨🇳 101.126.46.108

🇺🇸 20.64.105.250

🇯🇵 8.216.17.176

🇮🇷 2.180.110.145

🇹🇼 198.235.24.45

🇺🇸 192.3.127.40

🇨🇳 175.173.81.73

🇺🇸 162.216.149.70

🇳🇱 160.119.76.50

🇵🇰 153.117.14.15

🇩🇪 141.11.250.239

🇨🇳 119.29.119.117