JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.205.143

164.92.205.143 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 36%: ?

36%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.205.143

Whois 164.92.205.143

IP Abuse Reports for 164.92.205.143:

This IP address has been reported a total of 19 times from 15 distinct sources. 164.92.205.143 was first reported on January 15th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-10-20 20:05:04 (2 days ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01]	Hacking Brute-Force Bad Web Bot Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-20 19:08:01 (2 days ago)	Fail2Ban - [WEB]Exploit attempts (SQLi, RCE, path traversal) on webexploits ... [ice01,ice02,wa02]	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 18:58:55 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 164.92.205.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.92.205.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:58:51.558652 2026] [security2:error] [pid 25615:tid 25615] [client 164.92.205.143:60002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.5"] [uri "/.git/config"] [unique_id "ate566DNBQBzfh0V69BBxQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 boxed-it	2026-10-20 18:52:42 (2 days ago)	GET /.git/config (Tarpitted for 1m, wasted 3.63kB)	Web App Attack
Anonymous	2026-10-20 18:50:22 (2 days ago)	164.92.205.143 - - [20/Oct/2026:18:50:21 +0000] "GET /.git/config HTTP/1.1" 503 5350 "-" "Mozilla/5. ... show more 164.92.205.143 - - [20/Oct/2026:18:50:21 +0000] "GET /.git/config HTTP/1.1" 503 5350 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 joharikop	2026-10-20 18:48:46 (2 days ago)	Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-cred ... show more Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-credential-probes jail. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 18:31:36 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 164.92.205.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.92.205.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:31:32.819857 2026] [security2:error] [pid 16607:tid 16607] [client 164.92.205.143:35206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.114"] [uri "/.git/config"] [unique_id "atezhAAu3Z009V4omWtZJwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 18:16:01 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 164.92.205.143 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 164.92.205.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:15:53.159944 2026] [security2:error] [pid 18161:tid 18161] [client 164.92.205.143:48374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.214"] [uri "/.git/config"] [unique_id "atev2bllundP0OENJY8rjwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 EvoX	2026-08-12 00:25:23 (2 months ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 4444 GET / User-Agent: Mozilla/5.0 (X11; Linux ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 4444 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 4444 [2] TCP show less	Hacking Bad Web Bot
🇺🇸 Starburst SysOp Team	2026-08-12 00:12:43 (2 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-4)	Hacking Bad Web Bot
Anonymous	2026-08-12 00:06:41 (2 months ago)	denied traffic to a honeypot network. destination port 4449.	Port Scan Hacking
🇨🇳 ThreatBook.io	2025-12-15 01:00:46 (10 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/164.92.205.143 2025-12-14 08:4 ... show more ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/164.92.205.143 2025-12-14 08:44:02 /favicon.ico 2025-12-14 08:44:02 / show less	Web App Attack
🇬🇧 spamverify.com	2025-12-14 00:46:08 (10 months ago)	Honeypot Hit: Port Scan (10000) WEBMIN	Web Spam Blog Spam Bad Web Bot Web App Attack
🇫🇷 centurion	2025-12-14 00:35:02 (10 months ago)	Blocked by UFW on dc00 [1133/tcp] Source port: 61011 TTL: 243 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on dc00 [1133/tcp] Source port: 61011 TTL: 243 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2025-03-02 08:05:24 (1 year ago)	tcp/8090 (3 or more attempts)	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 176.120.22.147

🇧🇪 104.199.17.198

🇩🇪 94.130.226.243

🇺🇸 76.129.23.151

🇺🇸 198.57.211.34

🇿🇦 168.210.70.244

🇨🇴 152.202.245.195

🇻🇳 103.195.236.35

🇺🇸 94.228.24.188

🇫🇷 88.142.46.185

🇫🇷 85.217.140.44

🇷🇺 79.105.226.61

🇮🇳 66.116.253.243

🇮🇳 49.204.74.149

🇺🇸 45.79.181.251

🇯🇵 8.216.9.30

🇬🇧 209.97.183.43

🇬🇧 193.163.125.152

🇺🇸 185.226.198.5

🇬🇧 185.91.69.248