This IP address has been reported a total of
226
times from
173 distinct
sources.
164.92.146.6 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.146.6 (NL/The Netherlands/-): ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.146.6 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)
show less
{"event":{"DateTime":"2025-12-28T10:35:05Z","RemoteAddr":"164.92.146.6:60692","Protocol":"SSH","Comm ...
show more{"event":{"DateTime":"2025-12-28T10:35:05Z","RemoteAddr":"164.92.146.6:60692","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"6244fd26-054b-4ba7-9c7a-0dd61f4ecd51","Environ":"","User":"elasticsearch","Password":"elasticsearch123","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"164.92.146.6","SourcePort":"60692","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2025-12-28T10:35:10Z","RemoteAddr":"164.92.146.6:60698","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"eb3fca42-3b7b-4606-9d84-0165cf62e181","Environ":"","User":"elasticsearch","Password":"p@ssw0rd","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","
show less
2025-12-28T10:53:56.168838 tlgy-node1 sshd[1323516]: Invalid user admin from 164.92.146.6 port 40842 ...
show more2025-12-28T10:53:56.168838 tlgy-node1 sshd[1323516]: Invalid user admin from 164.92.146.6 port 40842
2025-12-28T10:53:56.452416 tlgy-node1 sshd[1323516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.146.6
2025-12-28T10:53:59.123797 tlgy-node1 sshd[1323516]: Failed password for invalid user admin from 164.92.146.6 port 40842 ssh2
...
show less
Dec 28 17:42:05 intra sshd\[31080\]: Invalid user uftp from 164.92.146.6Dec 28 17:42:08 intra sshd\[ ...
show moreDec 28 17:42:05 intra sshd\[31080\]: Invalid user uftp from 164.92.146.6Dec 28 17:42:08 intra sshd\[31080\]: Failed password for invalid user uftp from 164.92.146.6 port 45426 ssh2Dec 28 17:42:09 intra sshd\[31082\]: Invalid user uftp from 164.92.146.6Dec 28 17:42:12 intra sshd\[31082\]: Failed password for invalid user uftp from 164.92.146.6 port 59452 ssh2Dec 28 17:42:13 intra sshd\[31087\]: Invalid user uftp from 164.92.146.6Dec 28 17:42:16 intra sshd\[31087\]: Failed password for invalid user uftp from 164.92.146.6 port 59462 ssh2
...
show less
Dec 28 17:24:49 intra sshd\[30980\]: Failed password for root from 164.92.146.6 port 60918 ssh2Dec 2 ...
show moreDec 28 17:24:49 intra sshd\[30980\]: Failed password for root from 164.92.146.6 port 60918 ssh2Dec 28 17:26:46 intra sshd\[30988\]: Invalid user admin from 164.92.146.6Dec 28 17:26:48 intra sshd\[30988\]: Failed password for invalid user admin from 164.92.146.6 port 59604 ssh2Dec 28 17:26:52 intra sshd\[30990\]: Invalid user admin from 164.92.146.6Dec 28 17:26:54 intra sshd\[30990\]: Failed password for invalid user admin from 164.92.146.6 port 59632 ssh2Dec 28 17:27:01 intra sshd\[30994\]: Invalid user admin from 164.92.146.6
...
show less
Brute-Force
SSH
Showing 1 to
15
of 226 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩