JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.206.94

164.92.206.94 was found in our database!

This IP was reported 334 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.206.94

Whois 164.92.206.94

IP Abuse Reports for 164.92.206.94:

This IP address has been reported a total of 334 times from 221 distinct sources. 164.92.206.94 was first reported on April 16th 2025, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 conrad10781	2026-05-26 10:36:10 (1 week ago)	nginx-direct-ip	Port Scan
🇦🇹 Pingger Shikkoken	2026-05-26 09:21:28 (1 week ago)	2026-05-26T09:21:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-05-26T09:21:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=164.92.206.94 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=63971 DF PROTO=TCP SPT=57478 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-26T09:21:29+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=164.92.206.94 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=63972 DF PROTO=TCP SPT=57478 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-26T09:21:31+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=164.92.206.94 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=63973 DF PROTO=TCP SPT=57478 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇺🇸 CBJ	2026-05-26 09:07:51 (1 week ago)	fail2ban: apache-proxy ...	Web App Attack
🇫🇮 23p02732	2026-05-26 08:42:08 (1 week ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack
🇩🇪 strxmpp	2026-05-26 08:39:48 (1 week ago)	164.92.206.94 - - [26/May/2026:10:39:48 +0200] "GET /solr/admin/info/system HTTP/1.1" 404 495 "-" "G ... show more 164.92.206.94 - - [26/May/2026:10:39:48 +0200] "GET /solr/admin/info/system HTTP/1.1" 404 495 "-" "Go-http-client/1.1" ... show less	Bad Web Bot
🇬🇧 PeravixGroup	2026-05-26 08:28:38 (1 week ago)	Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aara ... show more Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aaran.cloud show less	Email Spam
🇬🇧 AdrianT	2026-05-26 08:21:38 (1 week ago)	SMTP port scanning	Port Scan
🇵🇱 nfsec.pl	2026-05-26 07:03:14 (1 week ago)	Detected: TCP scan on port: 23 with flags: SYN	Port Scan
🇳🇱 treslong.com	2026-05-26 06:58:39 (1 week ago)	2026-05-26T08:58:39.384792+02:00 vm-11 postfix/smtpd[597318]: improper command pipelining after CONN ... show more 2026-05-26T08:58:39.384792+02:00 vm-11 postfix/smtpd[597318]: improper command pipelining after CONNECT from unknown[164.92.206.94]: \026\003\003\001\246\001\000\001\242\003\003\367\217\213\253\006\rK"q\037%Gu\n\226q']\300\333\v\330]6\307\t\344\245\232\253\037\367 'N\304\335\004\361b\272-\257\320E,\020\364\003\271\230\254\256\200\230<\201\bG4$\220\255\031n\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2026-05-26T08:58:39.431243+02:00 vm-11 postfix/smtpd[597318]: improper command pipelining after CONNECT from unknown[164.92.206.94]: \026\003\003\001\246\001\000\001\242\003\003:V\365\217\004\260\337\213G\243\331\327\362'\366\321\235B\036\022{\303\352\233\364p\207\364\276\203\213\031 \212l__\267\236\363%/\351%;\303\036rk\2435\306b\317Y\356o\367\367P#\217u6\265\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= 2026-05-26T08:58:39.491080+02:00 vm-11 postfix/smtpd[597318]: improper command pipelining after CONNECT fr ... show less	Brute-Force
🇯🇵 ki3	2026-05-26 06:31:30 (1 week ago)	Fail2Ban: Dovecot Attack 164.92.206.94 1779777089.0(JST)	Brute-Force SSH
🇳🇱 WinnieHoneypots	2026-05-26 05:55:52 (1 week ago)	Spraying garbage or empty requests on HTTP/S - [\x16\x03\x01\x01\x0C\x01\x00\x01\x08\x03\x03\x85\xF7 ... show more Spraying garbage or empty requests on HTTP/S - [\x16\x03\x01\x01\x0C\x01\x00\x01\x08\x03\x03\x85\xF7\x80\xF6\xD6!\xC5[8\xA0\|#\xA4\x0E\x8B\x8F\xCE\xA], obvious automated scanner, botnet or whatever scriptkiddie crap could that be show less	Port Scan Web App Attack
🇺🇸 johuang92	2026-05-26 05:37:39 (1 week ago)	Cowrie SSH honeypot: session 68baa2a0323e	SSH
🇱🇹 Selckie	2026-05-26 05:26:58 (1 week ago)	fail2ban: NGINX unusual impact	Web App Attack
🇬🇧 PeravixGroup	2026-05-26 03:45:26 (1 week ago)	Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aar ... show more Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aaran.cloud show less	Brute-Force
🇦🇹 begou.dev	2026-05-26 03:35:07 (1 week ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/993	Port Scan

Showing 241 to 255 of 334 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.248.197.77

🇺🇸 172.98.33.29

🇮🇳 168.220.237.171

🇰🇷 112.219.151.50

🇨🇦 85.217.149.58

🇩🇪 78.47.4.5

🇨🇦 61.8.181.201

🇳🇱 45.153.34.160

🇸🇬 43.156.71.43

🇲🇲 37.111.53.110

🇯🇵 20.89.244.168

🇰🇷 220.88.3.53

🇺🇸 209.90.232.26

🇬🇧 188.240.59.44

🇬🇧 188.30.63.114

🇸🇬 161.118.203.255

🇬🇧 159.253.63.187

🇳🇱 158.94.209.146

🇭🇰 150.5.169.176

🇺🇸 91.230.168.188