JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.206.94

164.92.206.94 was found in our database!

This IP was reported 334 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.206.94

Whois 164.92.206.94

IP Abuse Reports for 164.92.206.94:

This IP address has been reported a total of 334 times from 221 distinct sources. 164.92.206.94 was first reported on April 16th 2025, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇰 sbk97 (https://sayor.net)	2026-05-27 00:36:02 (1 week ago)	HTTP attack observed: GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1 \| status=301 \| response_size=250	Port Scan
🇵🇰 sbk97 (https://sayor.net)	2026-05-27 00:36:02 (1 week ago)	HTTP attacks observed: GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1 \| status=301 \|\| GET /query?q=SHOW+DIAG ... show more HTTP attacks observed: GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1 \| status=301 \|\| GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1 \| status=404 show less	Brute-Force
Anonymous	2026-05-26 23:57:09 (1 week ago)	164.92.206.94 - - [26/May/2026:23:57:08 +0000] "\x16\x03\x01\x01\x0C\x01\x00\x01\x08\x03\x03\x8FN\xE ... show more 164.92.206.94 - - [26/May/2026:23:57:08 +0000] "\x16\x03\x01\x01\x0C\x01\x00\x01\x08\x03\x03\x8FN\xEF\xE5)\xDD\xC8\xB7\x11f\x97E\x9D\xB5\x12\x81\x1C\xE2w\x98\xFB\x80\xBE\x80\xDB\xC4\x96\x0B)\xA5\x9E\xE7 \x9D\x94\x9F3Q\xDA}\x06\x870\x05\xE4W\xF3nv\xA3\xFE2\xA12c\xBA\x80" 400 150 "-" "-" "-" 164.92.206.94 - - [26/May/2026:23:57:08 +0000] "\x16\x03\x01\x01\x0C\x01\x00\x01\x08\x03\x03\x1F\xAE\xE9\xE89p\xB1\xE0\xFD\x5C`\xF6\x8B\x96@p\x14\xC0W\xCB4\xF4\xD18\x06Y]\x88)`\x8ER eF\x03\x8F\xCAL\x02\xF8\x7F\xBFB\|\x7F\x19y\x5C_Q\xA7V)\xC7\x19`\x22m+\xF6G:\xF3\xD7\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-" ... show less	Port Scan Brute-Force
🇹🇷 0xi	2026-05-26 23:00:38 (1 week ago)	Malicious scanning and attack activity detected (37 attempts). Targeted ports: 18789. Triggered sens ... show more Malicious scanning and attack activity detected (37 attempts). Targeted ports: 18789. Triggered sensors: P0f, Suricata, Honeytrap. Observed via distributed honeypot network. show less	Port Scan
Anonymous	2026-05-26 22:56:56 (1 week ago)	postfix	Email Spam Web App Attack
🇵🇱 sefinek.net	2026-05-26 22:55:25 (1 week ago)	Honeypot hit: HTTP/1.1 request on 1234 GET /v2/_catalog User-Agent: Go-http-client/1.1; 1234 [4] TC ... show more Honeypot hit: HTTP/1.1 request on 1234 GET /v2/_catalog User-Agent: Go-http-client/1.1; 1234 [4] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 EnthecSolutions	2026-05-26 22:00:52 (1 week ago)	Detected by Enthec Solutions. \| Attempts: 34 in 24h \| Target port: 4891	Port Scan Hacking
🇩🇰 swrlly	2026-05-26 21:55:35 (1 week ago)	1 unauthorized webserver connection	Web App Attack
🇦🇺 LiftUp Hosting	2026-05-26 21:10:02 (1 week ago)	Honeypot hit: HTTP/1.1 request on 11434 GET /query?q=SHOW+DIAGNOSTICS User-Agent: Go-http-client/1. ... show more Honeypot hit: HTTP/1.1 request on 11434 GET /query?q=SHOW+DIAGNOSTICS User-Agent: Go-http-client/1.1; 11434 [3] TCP show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-05-26 20:16:48 (1 week ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 4891 GET /query?q=SHOW+DIAGNOSTICS User-Agent: Go-h ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 4891 GET /query?q=SHOW+DIAGNOSTICS User-Agent: Go-http-client/1.1; 4891 [3] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇳🇱 myip.foo	2026-05-26 18:47:16 (1 week ago)	[myip.foo] 164.92.206.94 - - [26/May/2026:18:47:15 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 4 ... show more [myip.foo] 164.92.206.94 - - [26/May/2026:18:47:15 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 248 "-" "Go-http-client/1.1" show less	Web App Attack
🇺🇸 kosada.com	2026-05-26 18:23:39 (1 week ago)	Web vulnerability probing: /query (bogus vhost/SNI)	Web App Attack
🇫🇮 licen777	2026-05-26 18:00:11 (1 week ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-26T17:46:20Z and 2026-05-2 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-26T17:46:20Z and 2026-05-26T18:00:10Z show less	Brute-Force SSH
Anonymous	2026-05-26 17:57:55 (1 week ago)	164.92.206.94 - - [26/May/2026:19:57:55 +0200] "GET /v2/_catalog HTTP/1.1" 301 169 "-" "Go-http-clie ... show more 164.92.206.94 - - [26/May/2026:19:57:55 +0200] "GET /v2/_catalog HTTP/1.1" 301 169 "-" "Go-http-client/1.1" show less	Bad Web Bot
Anonymous	2026-05-26 17:29:52 (1 week ago)	SSH tarpit (endlessh) connection from 164.92.206.94	Brute-Force SSH

Showing 211 to 225 of 334 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.248.197.77

🇺🇸 172.98.33.29

🇮🇳 168.220.237.171

🇰🇷 112.219.151.50

🇨🇦 85.217.149.58

🇩🇪 78.47.4.5

🇨🇦 61.8.181.201

🇳🇱 45.153.34.160

🇸🇬 43.156.71.43

🇲🇲 37.111.53.110

🇯🇵 20.89.244.168

🇰🇷 220.88.3.53

🇺🇸 209.90.232.26

🇬🇧 188.240.59.44

🇬🇧 188.30.63.114

🇸🇬 161.118.203.255

🇬🇧 159.253.63.187

🇳🇱 158.94.209.146

🇭🇰 150.5.169.176

🇺🇸 91.230.168.188