JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

164.92.172.84

Recent Activity

Abuse confidence score ?

33% Elevated

22 reports

18 reporters · latest 18 hours ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 164.92.172.84

This IP address has been reported a total of 22 times from 18 distinct sources. 164.92.172.84 was first reported on March 21st 2024, and the most recent report was 18 hours ago. In the last 60 days, the top reporter locations were: Germany with 2 reports; Finland with 1 report; Sweden with 1 report. The most common categories in these recent reports were: Port Scan 5 times; Hacking 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-22 02:45:19 (18 hours ago)	Drop from IP address 164.92.172.84 to tcp-port 5003	Port Scan
🇺🇸 MPL	2026-09-22 02:42:03 (18 hours ago)	tcp/4782 (2 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-09-22 01:53:05 (19 hours ago)	FW-PortScan: Traffic Blocked srcport=61007 dstport=6606	Port Scan
🇫🇮 sonot	2026-08-24 00:57:40 (4 weeks ago)	Blocked by UFW on mail [8001/tcp] \| SPT: 61008 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on mail [8001/tcp] \| SPT: 61008 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-24 00:53:12 (4 weeks ago)	denied traffic to a honeypot network. destination port 6931.	Port Scan Hacking
🇩🇪 ps-center	2024-05-15 17:24:10 (2 years ago)	RDM-W: TCP-Scanner. Port: 23	Port Scan
Anonymous	2024-05-13 18:10:51 (2 years ago)	Incessant email spamming, attempting to find an open relay or other exploits (hacking)	Email Spam Hacking
🇪🇸 didevi	2024-03-24 14:13:29 (2 years ago)	Mar 24 15:13:29 mail01 postfix/smtps/smtpd[4763]: warning: unknown[164.92.172.84]: SASL LOGIN authen ... show more Mar 24 15:13:29 mail01 postfix/smtps/smtpd[4763]: warning: unknown[164.92.172.84]: SASL LOGIN authentication failed: authentication failure show less	Brute-Force
🇪🇸 didevi	2024-03-24 04:11:03 (2 years ago)	Mar 24 05:11:02 mail01 postfix/smtps/smtpd[16324]: warning: unknown[164.92.172.84]: SASL LOGIN authe ... show more Mar 24 05:11:02 mail01 postfix/smtps/smtpd[16324]: warning: unknown[164.92.172.84]: SASL LOGIN authentication failed: authentication failure show less	Brute-Force
🇺🇸 FABIO EGAS	2024-03-24 02:11:54 (2 years ago)	(PERMBLOCK) 164.92.172.84 (DE/Germany/-) has had more than 4 temp blocks	Hacking
Anonymous	2024-03-24 00:07:28 (2 years ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH	Brute-Force SSH
🇩🇪 uestueno	2024-03-24 00:00:22 (2 years ago)	SMTP/SASL Bruteforce	Brute-Force
🇧🇷 SvrAdmin	2024-03-23 22:43:20 (2 years ago)	[4252] (smtpauth) Failed SMTP AUTH login from 164.92.172.84 (DE/Germany/-): 5 in the last 3600 secs; ... show more [4252] (smtpauth) Failed SMTP AUTH login from 164.92.172.84 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-03-23 19:04:23 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:42470: 535 Incorrect authentication data ([email protected]) 2024-03-23 19:15:48 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:43686: 535 Incorrect authentication data ([email protected]) 2024-03-23 19:24:45 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:44864: 535 Incorrect authentication data ([email protected]) 2024-03-23 19:29:14 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:49448: 535 Incorrect authentication data ([email protected]) 2024-03-23 19:43:15 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:58454: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
🇧🇷 SvrAdmin	2024-03-23 21:54:30 (2 years ago)	[161] (smtpauth) Failed SMTP AUTH login from 164.92.172.84 (DE/Germany/-): 5 in the last 3600 secs; ... show more [161] (smtpauth) Failed SMTP AUTH login from 164.92.172.84 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-03-23 18:17:09 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:34728: 535 Incorrect authentication data ([email protected]) 2024-03-23 18:32:12 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:36826: 535 Incorrect authentication data ([email protected]) 2024-03-23 18:40:48 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:60094: 535 Incorrect authentication data ([email protected]) 2024-03-23 18:45:15 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:50776: 535 Incorrect authentication data ([email protected]) 2024-03-23 18:54:23 dovecot_login authenticator failed for (ADMIN) [164.92.172.84]:50724: 535 Incorrect authentication data ([email protected]) show less	Port Scan Hacking Brute-Force Exploited Host
Anonymous	2024-03-23 21:47:48 (2 years ago)	2024-03-23 18:36:10,506 INFO [qtp192881625-981:smtp://mail.likenet.com.br:7073/service/admin/soap/] ... show more 2024-03-23 18:36:10,506 INFO [qtp192881625-981:smtp://mail.likenet.com.br:7073/service/admin/soap/] [oip=164.92.172.84;oport=56754;oproto=smtp;soapId=3a168103;] SoapEngine - handler exception: authentication failed for [[email protected]], account not found 2024-03-23 18:47:47,762 INFO [qtp192881625-1011:smtp://mail.likenet.com.br:7073/service/admin/soap/] [oip=164.92.172.84;oport=36960;oproto=smtp;soapId=3a16810a;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: account not found. 2024-03-23 18:47:47,762 INFO [qtp192881625-1011:smtp://mail.likenet.com.br:7073/service/admin/soap/] [oip=164.92.172.84;oport=36960;oproto=smtp;soapId=3a16810a;] SoapEngine - handler exception: authentication failed for [[email protected]], account not found ... show less	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 213.235.33.106

🇧🇷 192.141.196.56

🇷🇺 46.188.52.59

🇸🇬 185.200.116.75

🇺🇸 174.68.45.249

🇫🇮 147.185.133.147

🇨🇳 113.44.102.176

🇺🇸 107.174.82.77

🇫🇷 85.217.140.26

🇵🇹 46.102.25.134

🇧🇷 189.108.215.39

🇩🇪 185.176.94.60

🇷🇺 178.219.38.228

🇹🇷 149.50.239.232

🇺🇿 144.124.196.10

🇮🇳 103.163.44.10

🇧🇩 103.69.161.112

🇨🇦 85.217.149.9

🇩🇪 57.131.129.97

🇩🇪 36.255.97.23