JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.169.148

164.92.169.148 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.169.148

Whois 164.92.169.148

IP Abuse Reports for 164.92.169.148:

This IP address has been reported a total of 46 times from 31 distinct sources. 164.92.169.148 was first reported on December 19th 2024, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2025-10-31 06:38:16 (7 months ago)	tcp/8808 (2 or more attempts)	Port Scan
🇺🇸 MPL	2025-10-31 06:38:16 (7 months ago)	tcp/8808	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-10-31 06:35:20 (7 months ago)	Port probe to tcp/8888 (newsedge) [ros]	Port Scan
🇳🇱 rshict	2024-12-30 04:22:12 (1 year ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
🇫🇷 service Informatique	2024-12-20 04:00:37 (1 year ago)	GET /.env	Web App Attack
🇸🇪 SkyDancer	2024-12-19 21:17:52 (1 year ago)	Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by ... show more Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-A-X show less	Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2024-12-19 16:54:15 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 164.92.169.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.92.169.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 19 11:54:10.740154 2024] [security2:error] [pid 20312:tid 20312] [client 164.92.169.148:46868] [client 164.92.169.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.13"] [uri "/.env"] [unique_id "Z2RPsvJjVlFJmD3rFu04pAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 sdos.es	2024-12-19 16:50:41 (1 year ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
Anonymous	2024-12-19 16:35:58 (1 year ago)	fail2ban_hh apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [uri "/.env"]	Web App Attack
🇺🇸 TPI-Abuse	2024-12-19 16:28:40 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 164.92.169.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.92.169.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 19 11:28:33.495884 2024] [security2:error] [pid 3399:tid 3399] [client 164.92.169.148:42990] [client 164.92.169.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.146"] [uri "/.env"] [unique_id "Z2RJsWOlnTLDMZOMCo_X4gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-19 16:27:33 (1 year ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET / HTTP/1.0	Hacking Web App Attack
🇺🇸 WebRanger	2024-12-19 16:27:21 (1 year ago)	GET /.env HTTP/1.1 403 146 "- GET /.env HTTP/1.1" 403 146 "-" "Mozilla/5.0 Keydrop" "-	Web App Attack
🇧🇪 sid3windr	2024-12-19 16:16:03 (1 year ago)	GET /.env (Tarpitted for , wasted 0B)	Web App Attack
🇺🇸 chronos	2024-12-19 16:07:25 (1 year ago)	[AUTORAVALT][[19/12/2024 - 13:07:25 -03:00 UTC] Attack from [DigitalOcean, LLC] [164.92.169.148] Act ... show more [AUTORAVALT][[19/12/2024 - 13:07:25 -03:00 UTC] Attack from [DigitalOcean, LLC] [164.92.169.148] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plu] ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-12-19 16:04:23 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 164.92.169.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.92.169.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 19 11:04:16.817650 2024] [security2:error] [pid 3790607:tid 3790607] [client 164.92.169.148:52980] [client 164.92.169.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.145"] [uri "/.env"] [unique_id "Z2REAPPslFChg-3AKOH0MgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 192.248.150.180

🇷🇴 188.25.56.173

🇹🇼 172.253.239.151

🇺🇸 167.99.61.106

🇫🇮 147.185.133.118

🇫🇮 130.49.76.195

🇩🇪 109.61.80.158

🇮🇪 63.34.144.72

🇺🇸 45.42.88.54

🇺🇸 196.51.184.107

🇳🇱 193.176.31.239

🇧🇷 177.131.178.84

🇨🇳 115.236.127.48

🇧🇬 79.124.49.226

🇫🇷 78.197.6.173

🇺🇸 65.49.1.25

🇺🇸 64.62.156.185

🇦🇷 45.186.25.130

🇬🇧 35.203.211.119

🇺🇸 20.169.105.90