This IP address has been reported a total of
61
times from
44 distinct
sources.
164.92.139.203 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 1
report;
Singapore
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Port Scan
2
times;
Brute-Force
1
time;
SSH
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-30T11:43:08.095203+08:00 vps-ebd448c1 sshd-session[3119280]: banner exchange: Connection fro ...
show more2026-09-30T11:43:08.095203+08:00 vps-ebd448c1 sshd-session[3119280]: banner exchange: Connection from 164.92.139.203 port 40556: invalid format
2026-09-30T11:43:08.485498+08:00 vps-ebd448c1 sshd-session[3119295]: Connection from 164.92.139.203 port 40558 on 51.79.161.204 port 22 rdomain ""
2026-09-30T11:43:08.528083+08:00 vps-ebd448c1 sshd-session[3119295]: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1"
show less
Blocked by UFW (TCP on 33333)
Source port: 61011
TTL: 238
Packet length: 44
TOS: 0x00
This report ( ...
show moreBlocked by UFW (TCP on 33333)
Source port: 61011
TTL: 238
Packet length: 44
TOS: 0x00
This report (for 164.92.139.203) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 6936.
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.139.203 (DE/Germany/-): 2 in t ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.139.203 (DE/Germany/-): 2 in the last 3600 secs (0-201)
show less
2026-03-13T18:18:54.400959+01:00 pbs sshd-session[84036]: Failed password for invalid user apache fr ...
show more2026-03-13T18:18:54.400959+01:00 pbs sshd-session[84036]: Failed password for invalid user apache from 164.92.139.203 port 45720 ssh2
2026-03-13T18:19:31.032858+01:00 pbs sshd-session[84054]: Invalid user apache from 164.92.139.203 port 54308
2026-03-13T18:19:31.040451+01:00 pbs sshd-session[84054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.139.203
2026-03-13T18:19:32.401533+01:00 pbs sshd-session[84054]: Failed password for invalid user apache from 164.92.139.203 port 54308 ssh2
2026-03-13T18:20:14.712777+01:00 pbs sshd-session[84072]: Invalid user apache from 164.92.139.203 port 37442
...
show less
Fail2ban jail: ssh | IP: 164.92.139.203 | Failures: 3 | Last match: Mar 13 16:51:50 eager-sanderson ...
show moreFail2ban jail: ssh | IP: 164.92.139.203 | Failures: 3 | Last match: Mar 13 16:51:50 eager-sanderson sshd-session[764472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.139.203
Mar 13 16:51:52 eager-sanderson sshd-session[764472]: Failed password for invalid user pi from 164.92.139.203 port 56954 ssh2
Mar 13 17:01:56 eager-sanderson sshd-session[764604]: Invalid user oracle from 164.92.139.203 port 54268
Mar 13 17:01:56 eager-sanderson sshd-session[764604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.139.203
Mar 13 17:01:58 eager-sanderson sshd-session[764604]: Failed password for invalid user oracle from 164.92.139.203 port 54268 ssh2
show less
