JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.169.162

164.92.169.162 was found in our database!

This IP was reported 266 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.169.162

Whois 164.92.169.162

IP Abuse Reports for 164.92.169.162:

This IP address has been reported a total of 266 times from 87 distinct sources. 164.92.169.162 was first reported on September 20th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sumnone	2025-05-01 06:42:50 (1 year ago)	Port probing on unauthorized port 8088	Port Scan Hacking Exploited Host
🇨🇳 ThreatBook.io	2025-04-02 01:43:05 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/164.92.169.162 2025-04 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/164.92.169.162 2025-04-01 12:36:04 /.env show less	Web App Attack
Anonymous	2025-04-01 11:54:16 (1 year ago)	Reported from Nginx log analysis 19. Log: 164.92.169.162 - - [01/Apr/2025:xx:xx:xx 0000] "GET /.env ... show more Reported from Nginx log analysis 19. Log: 164.92.169.162 - - [01/Apr/2025:xx:xx:xx 0000] "GET /.env HTTP/1.1" xxx xxx "-" "Mozilla/5.0 Keydrop" "-" "DE Germany Frankfurt am Main" "AS14061" "DIGITALOCEAN-ASN" \| 164.92.169.162 - - [01/Apr/2025:xx:xx:xx 0000] "GET /.env HTTP/1.1" xxx xxx "-" "Mozilla/5.0 Keydrop" "-" "DE Germany Frankfurt am Main" "AS14061" "DIGITALOCEAN-ASN" show less	Port Scan Brute-Force SSH
Anonymous	2025-04-01 09:53:47 (1 year ago)	Reported from Nginx log analysis 11. Log: 164.92.169.162 - - [01/Apr/2025:xx:xx:xx 0200] "GET /.env ... show more Reported from Nginx log analysis 11. Log: 164.92.169.162 - - [01/Apr/2025:xx:xx:xx 0200] "GET /.env HTTP/1.1" xxx xxx "-" "Mozilla/5.0 Keydrop" "-" "DE Germany Frankfurt am Main" "AS14061" "DIGITALOCEAN-ASN" show less	Port Scan Brute-Force SSH
Anonymous	2025-04-01 09:45:01 (1 year ago)	Configuration snooping (/.env), accessed by IP not domain: 164.92.169.162 - - [01/Apr/2025:10:38:17 ... show more Configuration snooping (/.env), accessed by IP not domain: 164.92.169.162 - - [01/Apr/2025:10:38:17 +0100] "GET /.env HTTP/1.1" 404 321 "-" "Mozilla/5.0 Keydrop" show less	Hacking Web App Attack
🇺🇸 WebRanger	2025-04-01 09:42:17 (1 year ago)	GET /.env HTTP/1.1 403 146 "- GET /.env HTTP/1.1" 403 146 "-" "Mozilla/5.0 Keydrop" "-	Web App Attack
🇺🇸 aks4226	2025-04-01 09:37:30 (1 year ago)	Bot search, attacking common web applications.	Web App Attack
🇺🇸 TPI-Abuse	2025-04-01 09:24:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 164.92.169.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.92.169.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 01 05:24:00.568900 2025] [security2:error] [pid 18906:tid 18906] [client 164.92.169.162:34808] [client 164.92.169.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.122"] [uri "/.env"] [unique_id "Z-uwsND7vSlnugp1AHP9OgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 VXG-NET	2025-04-01 09:20:02 (1 year ago)	port=443, indicator_type=info-leak	Hacking
🇫🇷 LRNP	2025-04-01 09:12:43 (1 year ago)	_:443 164.92.169.162 - - [01/Apr/2025:09:12:18 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 ... show more _:443 164.92.169.162 - - [01/Apr/2025:09:12:18 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 Keydrop" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-01 09:07:33 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 164.92.169.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.92.169.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 01 05:07:29.947805 2025] [security2:error] [pid 3974303:tid 3974303] [client 164.92.169.162:48960] [client 164.92.169.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.229"] [uri "/.env"] [unique_id "Z-us0aGpugURn4onXwL12gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 services.org.pl	2025-04-01 09:00:31 (1 year ago)	open() "/var/www/html/.env" failed (2: No such file or directory), client: 164.92.169.162, server: a ... show more open() "/var/www/html/.env" failed (2: No such file or directory), client: 164.92.169.162, server: api.services.org.pl, request: "GET /.env HTTP/1.1", host: "46.102.157.176" show less	Bad Web Bot Web App Attack
🇧🇬 pa4080	2025-04-01 08:45:22 (1 year ago)	Detected by ModSecurity. Request URI: /.env	Web App Attack
🇺🇸 TPI-Abuse	2025-04-01 08:44:45 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 164.92.169.162 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.92.169.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 01 04:44:39.726060 2025] [security2:error] [pid 9888:tid 9888] [client 164.92.169.162:48494] [client 164.92.169.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.165"] [uri "/.env"] [unique_id "Z-und9_0RLZi0-u_tJGglgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 taivas.nl	2025-04-01 08:30:02 (1 year ago)	General bad request	Bad Web Bot

Showing 1 to 15 of 266 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.97.112.179

🇺🇸 216.25.89.113

🇨🇱 181.226.16.8

🇧🇷 177.135.206.10

🇨🇦 20.104.104.62

🇺🇸 17.246.15.230

🇱🇹 213.101.138.172

🇩🇪 172.217.34.24

🇺🇸 154.16.114.112

🇲🇾 47.250.135.144

🇸🇬 13.212.31.172

🇳🇱 185.224.128.16

🇹🇼 114.46.115.201

🇬🇧 78.153.140.39

🇺🇸 66.132.172.125

🇳🇱 45.140.222.154

🇹🇿 41.93.28.12

🇦🇷 200.59.114.120

🇩🇪 167.94.146.35

🇩🇪 157.230.124.251