164.92.67.221
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Santa Clara, California
No reports in the last 60 days
164.92.67.221 has been reported 36 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
36 from
21 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇨🇿 kronos |
IDS: ET CINS Active Threat Intelligence Poor Reputation IP group 208 | SID:2403507
|
Hacking | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.67.221 (US/United States/-): 2 in the last 3600 secs (0-196)
|
Hacking | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to mySQL port 3306) detectado de 164.92.67.221
|
Port Scan Brute-Force SSH | |
| 🇷🇴 SpamStopper |
Fail2Ban - POSTFIX RCE Shell Injection Atack
|
Brute-Force | |
| 🇺🇸 MPL |
tcp/5173
|
Port Scan | |
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 75/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: galah. Context: 164.92.67.221 classified as botnet node participating in coordinated attack campaigns (high confidence).
|
Port Scan Hacking Brute-Force Web App Attack SSH | |
| 🇫🇷 EvoX |
|
Hacking Bad Web Bot | |
| 🇷🇴 abuse_IP_reporter |
Sep 6 15:53:12 server UFW BLOCK SRC=164.92.67.221 PROTO=TCP SPT=61015 DPT=9000
|
Port Scan | |
| 🇺🇸 MPL |
tcp/85
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 3000,6939 (3 or more attempts)
|
Port Scan | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.67.221 (US/United States/-): 2 in the last 3600 secs (0-196)
|
Hacking | |
| 🇺🇸 MPL |
tcp/8880 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [1912/tcp] | SPT: 61006 | TTL: 246 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [1912/tcp] | SPT: 61006 | TTL: 246 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown