JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.147.239

164.92.147.239 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 50%: ?

50%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.147.239

Whois 164.92.147.239

IP Abuse Reports for 164.92.147.239:

This IP address has been reported a total of 21 times from 19 distinct sources. 164.92.147.239 was first reported on September 2nd 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-10-17 04:05:03 (6 days ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-17 UTC.	Brute-Force
Anonymous	2026-10-16 10:33:01 (1 week ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇵🇱 Online store	2026-10-16 09:50:21 (1 week ago)	Mass requests to non-existent paths of a website looking for exploitable software (.env, WordPress, ... show more Mass requests to non-existent paths of a website looking for exploitable software (.env, WordPress, phpMyAdmin, backups): 8 requests (3 POST) between 2026-10-16 09:13:37 and 2026-10-16 09:50:21 UTC; 2 different browser User-Agent strings from this single address (identity rotated to evade security controls); blocked by our WAF: yes. Automated report (Log Guard) reviewed by the webmaster. show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-10-16 09:50:05 (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇮🇹 VHosting	2026-10-16 09:45:05 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-10-16 09:27:50 (1 week ago)	164.92.147.239 - - [16/Oct/2026:11:12:17 +0200] "GET /wp-login.php HTTP/1.1" 301 599 "-" "Mozilla/5. ... show more 164.92.147.239 - - [16/Oct/2026:11:12:17 +0200] "GET /wp-login.php HTTP/1.1" 301 599 "-" "Mozilla/5.0" 164.92.147.239 - - [16/Oct/2026:11:12:17 +0200] "GET /wp-login.php HTTP/1.1" 404 4542 "-" "Mozilla/5.0" 164.92.147.239 - - [16/Oct/2026:11:27:47 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 569 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 164.92.147.239 - - [16/Oct/2026:11:27:47 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 403 4598 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 164.92.147.239 - - [16/Oct/2026:11:27:47 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 579 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 164.92.147.239 - - [16/Oct/2026:11:27:47 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 403 4596 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari show less	Web App Attack Hacking
🇵🇱 Budyn	2026-10-16 09:25:19 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sql.goblinpot.store \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇨🇭 ALPHANET	2026-10-16 09:20:15 (1 week ago)	web exploits	Hacking Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2026-10-16 09:17:08 (1 week ago)	[16/Oct/2026:12:17:07 +0300] -- 164.92.147.239 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp- ... show more [16/Oct/2026:12:17:07 +0300] -- 164.92.147.239 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇨🇭 Origon	2026-06-18 15:13:20 (4 months ago)	NOQUEUE - IP: 164.92.147.239 - Jun 18 17:13:20 plesk postfix/smtpd[3548388]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 164.92.147.239 - Jun 18 17:13:20 plesk postfix/smtpd[3548388]: NOQUEUE: reject: RCPT from outbound-mta2.soitcolor.com[164.92.147.239]: 554 5.7.1 Service unavailable; Client host [164.92.147.239] blocked using dnsbl-3.uceprotect.net; Your ISP DIGITALOCEAN-ASN, US/AS14061 is UCEPROTECT-Level3 listed because of a spamscore of 83.1. See: http://www.uceprotect.net/rblcheck.php?ipr=164.92.147.239; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<outbound-mta2.soitcolor.com> show less	Email Spam
🇨🇭 Origon	2026-06-15 09:49:01 (4 months ago)	NOQUEUE - IP: 164.92.147.239 - Jun 15 11:49:01 plesk postfix/smtpd[1596333]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 164.92.147.239 - Jun 15 11:49:01 plesk postfix/smtpd[1596333]: NOQUEUE: reject: RCPT from outbound-mta2.soitcolor.com[164.92.147.239]: 554 5.7.1 Service unavailable; Client host [164.92.147.239] blocked using dnsbl-3.uceprotect.net; Your ISP DIGITALOCEAN-ASN, US/AS14061 is UCEPROTECT-Level3 listed because of a spamscore of 93.1. See: http://www.uceprotect.net/rblcheck.php?ipr=164.92.147.239; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<outbound-mta2.soitcolor.com> show less	Email Spam
🇬🇧 Andrew	2026-06-11 06:53:16 (4 months ago)	Blocked by UFW (TCP on port 8089). Source port: 61012 TTL: 245 Packet length: 44 TOS: 0x00 This rep ... show more Blocked by UFW (TCP on port 8089). Source port: 61012 TTL: 245 Packet length: 44 TOS: 0x00 This report (for 164.92.147.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-11 06:49:08 (4 months ago)	tcp/8082	Port Scan
🇺🇸 xmission.com	2026-06-11 05:47:20 (4 months ago)	Blocked by UFW (TCP on 8081) Source port: 61014 TTL: 238 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8081) Source port: 61014 TTL: 238 Packet length: 44 TOS: 0x08 This report (for 164.92.147.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 adnscom.net	2026-06-07 21:26:09 (4 months ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.71.144.169

🇨🇴 149.130.165.103

🇭🇰 141.193.153.146

🇺🇸 129.250.3.81

🇮🇩 103.154.77.48

🇧🇬 79.124.59.82

🇸🇦 77.31.172.121

🇺🇸 66.132.172.240

🇺🇸 66.132.159.35

🇧🇪 34.62.116.145

🇿🇲 2605:59c8:6ce7:ae08:199c:21ff:2a14:cb9c

🇮🇩 180.244.145.143

🇵🇭 180.193.181.195

🇲🇽 177.249.169.21

🇮🇳 103.91.246.101

🇬🇧 77.67.26.211

🇺🇸 66.59.208.4

🇳🇱 45.148.10.157

🇺🇸 23.129.64.144

🇬🇧 213.166.84.38