JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.198.3

164.92.198.3 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 67%: ?

67%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.198.3

Whois 164.92.198.3

IP Abuse Reports for 164.92.198.3:

This IP address has been reported a total of 34 times from 30 distinct sources. 164.92.198.3 was first reported on August 9th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-01 22:48:06 (2 weeks ago)	2026-09-01T13:19:29.565716+02:00 srv1 pvedaemon[3268649]: authentication failure; rhost=::ffff:164.9 ... show more 2026-09-01T13:19:29.565716+02:00 srv1 pvedaemon[3268649]: authentication failure; rhost=::ffff:164.92.198.3 user=root@pam msg=401 permission denied - invalid PVE ticket 2026-09-01T23:32:07.268109+02:00 srv1 pvedaemon[3296866]: authentication failure; rhost=::ffff:164.92.198.3 user=root@pam msg=401 permission denied - invalid PVE ticket 2026-09-01T23:47:49.507464+02:00 srv1 pvedaemon[3268649]: authentication failure; rhost=::ffff:164.92.198.3 user=root@pam msg=401 permission denied - invalid PVE ticket 2026-09-01T23:59:00.614359+02:00 srv1 pvedaemon[3282974]: authentication failure; rhost=::ffff:164.92.198.3 user=root@pam msg=401 permission denied - invalid PVE ticket 2026-09-02T00:48:05.555160+02:00 srv1 pvedaemon[3268649]: authentication failure; rhost=::ffff:164.92.198.3 user=root@pam msg=Authentication failure ... show less	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-31 07:57:03 (2 weeks ago)	Port Scan detected from 164.92.198.3 (DE/Germany/-). 11 hits in the last 167 seconds (0-193)	Port Scan
🇯🇵 VXG-NET	2026-08-30 18:16:36 (3 weeks ago)	port=80, indicator_type=code-execution	Hacking
🇹🇷 muratkaya665	2026-08-30 13:18:58 (3 weeks ago)	IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: VMware.vCenter.CVE-2021-2 ... show more IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: VMware.vCenter.CVE-2021-21985.Remote.Code.Execution. Dest Port: 80. Service: HTTP. Message: misc: VMware.vCenter.CVE-2021-21985.Remote.Code.Execution. show less	Hacking
🇬🇷 setupgr	2026-08-27 02:05:59 (3 weeks ago)	(mod_security) mod_security (id:9999001) triggered by 164.92.198.3 (DE/Germany/Hesse/Frankfurt am Ma ... show more (mod_security) mod_security (id:9999001) triggered by 164.92.198.3 (DE/Germany/Hesse/Frankfurt am Main/-/[AS14061 DIGITALOCEAN-ASN]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Aug 27 05:05:55.846837 2026] [security2:error] [pid 1783230:tid 1783391] [client 164.92.198.3:7746] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^154\\\\.57\\\\.7\\\\.73$" at REQUEST_HEADERS:Host. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "155"] [id "9999001"] [msg "Direct incoming request to server shared IP blocked by admin"] [hostname "154.57.7.73"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ao-bg9ZLfWuWvdxGOQ0gCwAAAg0"] show less	Port Scan
🇦🇺 2000cn.com.au	2026-08-26 04:35:44 (3 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-probing	Web App Attack Hacking
🇬🇷 setupgr	2026-08-26 01:03:34 (3 weeks ago)	(mod_security) mod_security (id:9999001) triggered by 164.92.198.3 (DE/Germany/Hesse/Frankfurt am Ma ... show more (mod_security) mod_security (id:9999001) triggered by 164.92.198.3 (DE/Germany/Hesse/Frankfurt am Main/-/[AS14061 DIGITALOCEAN-ASN]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Aug 26 04:03:32.748358 2026] [security2:error] [pid 1783230:tid 1783422] [client 164.92.198.3:32070] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^154\\\\.57\\\\.7\\\\.73$" at REQUEST_HEADERS:Host. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "155"] [id "9999001"] [msg "Direct incoming request to server shared IP blocked by admin"] [hostname "154.57.7.73"] [uri "/"] [unique_id "ao47ZNZLfWuWvdxGOQ3l7gAAAhY"] show less	Port Scan
🇬🇧 andypiper	2026-08-26 01:03:01 (3 weeks ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 Séfora Srl	2026-08-26 00:07:39 (3 weeks ago)	crowdsecurity/http-cve-probing detected by CrowdSec	Web App Attack
🇺🇸 mnsf	2026-08-25 20:05:26 (3 weeks ago)	Abuse Detected (11)	Brute-Force Web App Attack
🇸🇪 vaia.cloud	2026-08-25 20:00:02 (3 weeks ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
🇪🇸 alferez	2026-08-25 16:47:39 (3 weeks ago)	wp2shell bug exploit	Hacking Exploited Host Web App Attack
Anonymous	2026-08-25 09:27:54 (3 weeks ago)	Scanner hitting /index.php?option=com_zoo&controller=item&task=element&filter_type=x%22+UNION+SELECT ... show more Scanner hitting /index.php?option=com_zoo&controller=item&task=element&filter_type=x%22+UNION+SELECT+CONCAT%280x7a3937666134363066643038%2Cdatabase%28%29%2C0x7c%29%2CCONCAT%280x7a3937666134363066643038%2Cdatabase%28%29%2C0x7c%29--+- on () — aaguard show less	Brute-Force Port Scan
🇩🇪 FeG Deutschland	2026-08-24 04:09:33 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
Anonymous	2026-08-23 23:14:04 (4 weeks ago)	Blocked by firewall on hugin [4000/tcp] \| Rule: UFW \| SPT: 57130 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [4000/tcp] \| Rule: UFW \| SPT: 57130 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.183

🇵🇾 190.128.171.14

🇲🇽 189.150.194.156

🇬🇧 35.203.210.64

🇬🇧 35.203.210.43

🇧🇪 198.235.24.244

🇵🇱 194.180.48.21

🇺🇸 162.216.149.14

🇳🇱 155.254.42.227

🇵🇱 109.205.211.21

🇱🇹 62.60.130.253

🇳🇱 45.156.128.124

🇳🇱 45.156.128.123

🇺🇸 45.79.207.204

🇳🇬 41.207.248.234

🇧🇪 34.38.199.232

🇺🇸 24.234.102.251

🇷🇴 2.57.122.53

🇮🇩 202.46.28.140

🇲🇦 197.153.57.103