JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.206.94

164.92.206.94 was found in our database!

This IP was reported 338 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.206.94

Whois 164.92.206.94

IP Abuse Reports for 164.92.206.94:

This IP address has been reported a total of 338 times from 222 distinct sources. 164.92.206.94 was first reported on April 16th 2025, and the most recent report was 36 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-05-26 18:23:39 (1 week ago)	Web vulnerability probing: /query (bogus vhost/SNI)	Web App Attack
🇫🇮 licen777	2026-05-26 18:00:11 (1 week ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-26T17:46:20Z and 2026-05-2 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-26T17:46:20Z and 2026-05-26T18:00:10Z show less	Brute-Force SSH
Anonymous	2026-05-26 17:57:55 (1 week ago)	164.92.206.94 - - [26/May/2026:19:57:55 +0200] "GET /v2/_catalog HTTP/1.1" 301 169 "-" "Go-http-clie ... show more 164.92.206.94 - - [26/May/2026:19:57:55 +0200] "GET /v2/_catalog HTTP/1.1" 301 169 "-" "Go-http-client/1.1" show less	Bad Web Bot
Anonymous	2026-05-26 17:29:52 (1 week ago)	SSH tarpit (endlessh) connection from 164.92.206.94	Brute-Force SSH
🇳🇱 NP Admin	2026-05-26 17:11:28 (1 week ago)	Detections=4	Brute-Force
🇮🇩 Konaa	2026-05-26 17:03:15 (1 week ago)	2026-05-26T23:20:21.176853+07:00 rapi postfix/smtpd[2140209]: lost connection after STARTTLS from un ... show more 2026-05-26T23:20:21.176853+07:00 rapi postfix/smtpd[2140209]: lost connection after STARTTLS from unknown[164.92.206.94] 2026-05-26T23:20:22.373970+07:00 rapi postfix/smtpd[2140208]: improper command pipelining after CONNECT from unknown[164.92.206.94]: \026\003\003\001\245\001\000\001\241\003\003X\204\035\2622\223\276L\032\3470\342\356qt\306dH\260\321\222\212\256\314\335\232\226\341fI/\r \230\024\250?j\0032\030\234}\tL\222\222\357n*\305\324\270\v\250\217\277E":\256\343\302s\233\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2026-05-26T23:20:22.557808+07:00 rapi postfix/smtpd[2140208]: lost connection after CONNECT from unknown[164.92.206.94] 2026-05-26T23:25:22.807361+07:00 rapi postfix/smtpd[2140209]: timeout after CONNECT from unknown[164.92.206.94] show less	Email Spam Port Scan Brute-Force
🇫🇷 0xNath	2026-05-26 16:25:26 (1 week ago)	2026-05-26T18:25:24.847857+02:00 srv1.renaudna.fr dovecot[1615]: imap-login: Disconnected: Connectio ... show more 2026-05-26T18:25:24.847857+02:00 srv1.renaudna.fr dovecot[1615]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=164.92.206.94, lip=192.168.1.253, TLS, session=<2zM78bpSJKKkXM5e> 2026-05-26T18:25:25.748228+02:00 srv1.renaudna.fr dovecot[1615]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=164.92.206.94, lip=192.168.1.253, session=<afFI8bpSMqKkXM5e> 2026-05-26T18:25:25.811639+02:00 srv1.renaudna.fr dovecot[1615]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=164.92.206.94, lip=192.168.1.253, session=<vOhJ8bpSQKKkXM5e> ... show less	Brute-Force
🇮🇩 Konaa	2026-05-26 16:21:15 (1 week ago)	2026-05-26T23:20:21.176853+07:00 rapi postfix/smtpd[2140209]: lost connection after STARTTLS from un ... show more 2026-05-26T23:20:21.176853+07:00 rapi postfix/smtpd[2140209]: lost connection after STARTTLS from unknown[164.92.206.94] 2026-05-26T23:20:22.373970+07:00 rapi postfix/smtpd[2140208]: improper command pipelining after CONNECT from unknown[164.92.206.94]: \026\003\003\001\245\001\000\001\241\003\003X\204\035\2622\223\276L\032\3470\342\356qt\306dH\260\321\222\212\256\314\335\232\226\341fI/\r \230\024\250?j\0032\030\234}\tL\222\222\357n*\305\324\270\v\250\217\277E":\256\343\302s\233\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2026-05-26T23:20:22.557808+07:00 rapi postfix/smtpd[2140208]: lost connection after CONNECT from unknown[164.92.206.94] show less	Email Spam Port Scan Brute-Force
🇭🇺 kisbala	2026-05-26 15:40:33 (1 week ago)	2026-05-26 17:40:30 no host name found for IP address 164.92.206.94 2026-05-26 17:40:31 no host name ... show more 2026-05-26 17:40:30 no host name found for IP address 164.92.206.94 2026-05-26 17:40:31 no host name found for IP address 164.92.206.94 2026-05-26 17:40:31 no host name found for IP address 164.92.206.94 2026-05-26 17:40:32 no host name found for IP address 164.92.206.94 2026-05-26 17:40:32 no host name found for IP address 164.92.206.94 ... show less	Email Spam Brute-Force
🇫🇮 geot	2026-05-26 15:10:07 (1 week ago)	GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1 GET /solr/admin/info/system HTTP/1.1	Web App Attack
Anonymous	2026-05-26 14:35:24 (1 week ago)	SMTP AUTH 164.92.206.94 (SMTP_LOGIN_ATTEMPT)	Brute-Force
🇹🇭 MWA SOC	2026-05-26 13:59:17 (1 week ago)		Hacking
🇬🇧 PeravixGroup	2026-05-26 13:56:47 (1 week ago)	Honeypot detection: Docker Registry unauthorized access / enumeration on port 6000. Severity: MEDIUM ... show more Honeypot detection: Docker Registry unauthorized access / enumeration on port 6000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 drewf.ink	2026-05-26 13:23:28 (1 week ago)	[13:23] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB2/3. Dialect(s): SMB 2.1	Hacking Exploited Host
🇧🇪 sauron-le-noir	2026-05-26 12:22:31 (1 week ago)	scan port : 23 from Allemagne at Tue May 26 14:26:34 2026	Port Scan

Showing 226 to 240 of 338 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 209.20.180.229

🇺🇸 65.49.1.10

🇺🇸 199.231.163.19

🇩🇪 185.176.94.38

🇺🇸 185.141.119.119

🇺🇸 162.216.150.232

🇩🇪 130.185.123.247

🇮🇳 122.169.97.132

🇨🇳 112.254.142.237

🇺🇸 104.168.74.62

🇫🇷 91.196.152.91

🇹🇿 41.59.7.113

🇺🇸 38.141.252.55

🇺🇸 24.199.126.56

🇺🇸 2604:a880:400:d1:0:4:6c79:9001

🇬🇧 195.206.182.217

🇺🇸 162.216.149.48

🇺🇸 161.35.113.47

🇮🇳 152.52.205.86

🇺🇸 137.184.40.222