This IP address has been reported a total of
325
times from
216 distinct
sources.
164.92.206.94 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Spraying garbage or empty requests on HTTP/S - [\x16\x03\x01\x01\x0C\x01\x00\x01\x08\x03\x03\xFB\xA7 ...
show moreSpraying garbage or empty requests on HTTP/S - [\x16\x03\x01\x01\x0C\x01\x00\x01\x08\x03\x03\xFB\xA7], obvious automated scanner, botnet or whatever scriptkiddie crap could that be
show less
[bulkvm.com/honeypot] Web application vulnerability scan. Port: 39602, request: GET /solr/admin/info ...
show more[bulkvm.com/honeypot] Web application vulnerability scan. Port: 39602, request: GET /solr/admin/info/system HTTP/1.1
, user-agent: Go-http-client/1.1, Time: 2026-06-03 07:28:33 UTC
show less
[Wed Jun 03 08:11:12.091565 2026] [core:info] [pid 48123:tid 48312] [client 164.92.206.94:18840] AH0 ...
show more[Wed Jun 03 08:11:12.091565 2026] [core:info] [pid 48123:tid 48312] [client 164.92.206.94:18840] AH00128: File does not exist: /home/harald/www/default_host/solr/admin/info/system
...
show less
164.92.206.94 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ...
show more164.92.206.94 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 262B. Report generated by Endlessh Report Generator v1.2.3
show less
[probe-44-49] 2026-06-03 03:40:13, Client: 164.92.206.94, Protocol: 6, Unauthorized activity to HTTP ...
show more[probe-44-49] 2026-06-03 03:40:13, Client: 164.92.206.94, Protocol: 6, Unauthorized activity to HTTP: GET /
show less
2026-06-03T10:56:23.789890+08:00 Galaxy postfix/smtpd[597889]: lost connection after STARTTLS from u ...
show more2026-06-03T10:56:23.789890+08:00 Galaxy postfix/smtpd[597889]: lost connection after STARTTLS from unknown[164.92.206.94]
2026-06-03T10:56:39.599216+08:00 Galaxy postfix/smtpd[597889]: improper command pipelining after CONNECT from unknown[164.92.206.94]: \026\003\003\001\246\001\000\001\242\003\003\025\025p2\v\2631w\3468\273S\261\2179tJ\267G0Dmt\022\000\246\2253\002\311\024\344 wF\330\344Jc\310\250\365\003\270\004,\035n]\035\307\2717\335\203Z\225\302\226\335\207\310\237\212\244\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
2026-06-03T10:56:39.870900+08:00 Galaxy postfix/smtpd[597889]: lost connection after CONNECT from unknown[164.92.206.94]
...
show less
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 18789
GET /query?q=SHOW+DIAGNOSTICS
User-Agent: Go- ...
show moreHoneypot [fra-de-honeypot]: HTTP/1.1 request on 18789
GET /query?q=SHOW+DIAGNOSTICS
User-Agent: Go-http-client/1.1; 18789 [3] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Honeypot hit: HTTP/1.1 request on 8000
GET /cgi-bin/authLogin.cgi
User-Agent: Go-http-client/1.1; 8 ...
show moreHoneypot hit: HTTP/1.1 request on 8000
GET /cgi-bin/authLogin.cgi
User-Agent: Go-http-client/1.1; 8000 [3] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-02T23:44:33.022288+02:00 srv postfix/submission/smtpd[420463]: lost connection after STARTTL ...
show more2026-06-02T23:44:33.022288+02:00 srv postfix/submission/smtpd[420463]: lost connection after STARTTLS from unknown[164.92.206.94]
2026-06-02T23:44:54.125513+02:00 srv postfix/submission/smtpd[420463]: improper command pipelining after CONNECT from unknown[164.92.206.94]: \026\003\003\001\246\001\000\001\242\003\003)zP\020v\213\362\332Kw\373\306\236\251\277]H\270\031=\016m\021_\bi<\255\217\302\271\033 O\324\257\237\331xI+6\037\2357\204WX\177^)OIs\372k\301\273\004\367P7\354\221\311\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
2026-06-02T23:44:54.130007+02:00 srv postfix/submission/smtpd[420463]: lost connection after UNKNOWN from unknown[164.92.206.94]
...
show less
Brute-Force
Showing 31 to
45
of 325 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩