JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.71.220

164.92.71.220 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 12%: ?

12%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.71.220

Whois 164.92.71.220

IP Abuse Reports for 164.92.71.220:

This IP address has been reported a total of 68 times from 46 distinct sources. 164.92.71.220 was first reported on August 16th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-27 12:00:42 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.71.220 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.71.220 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 MPL	2026-06-13 05:09:56 (1 month ago)	tcp/8888 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-06-13 04:39:20 (1 month ago)	tcp/8808	Port Scan
🇩🇪 ValtonTahiri	2026-06-13 04:01:18 (1 month ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=164.92.71.220; proto=TCP; source_port=61003; target_port=8081; flags=SYN show less	Port Scan
🇦🇺 MAGIC	2026-05-21 05:12:13 (2 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 MPL	2026-05-07 09:14:00 (2 months ago)	tcp/8088	Port Scan
🇺🇸 MPL	2026-05-07 08:20:15 (2 months ago)	tcp/6931	Port Scan
🇫🇷 masterguru	2026-04-24 07:29:37 (3 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.71.220 (US/United States/-): 1 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.71.220 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇺🇸 anon333	2025-06-03 22:34:24 (1 year ago)	Hacker syslog review 1748990063	Hacking
🇳🇱 Study Bitcoin 🤗	2025-06-03 20:26:19 (1 year ago)	3 port probes: tcp/13000, 2x tcp/4000 (terabase) [srv131,srv128]	Port Scan
🇺🇸 MPL	2025-06-03 19:53:15 (1 year ago)	tcp/6000	Port Scan
🇺🇸 MPL	2025-06-03 19:53:15 (1 year ago)	tcp/6000	Port Scan
Anonymous	2025-02-03 17:09:12 (1 year ago)	(WPLOGIN) WP Login Attack 164.92.71.220 (US/United States/-): 5 in the last 3600 secs; Ports: ; Dir ... show more (WPLOGIN) WP Login Attack 164.92.71.220 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1 show less	Brute-Force SSH
Anonymous	2025-02-03 15:23:57 (1 year ago)	164.92.71.220 - - [03/Feb/2025:16:23:07 +0100] "GET /atomlib.php HTTP/1.1" 404 32647 164.92.71.220 - ... show more 164.92.71.220 - - [03/Feb/2025:16:23:07 +0100] "GET /atomlib.php HTTP/1.1" 404 32647 164.92.71.220 - - [03/Feb/2025:16:23:19 +0100] "GET /log.php HTTP/1.1" 404 32647 164.92.71.220 - - [03/Feb/2025:16:23:25 +0100] "GET /mail.php HTTP/1.1" 404 32648 164.92.71.220 - - [03/Feb/2025:16:23:29 +0100] "GET /lufix.php HTTP/1.1" 404 32646 164.92.71.220 - - [03/Feb/2025:16:23:34 +0100] "GET /doc.php HTTP/1.1" 404 32647 164.92.71.220 - - [03/Feb/2025:16:23:38 +0100] "GET /bak.php HTTP/1.1" 404 32647 164.92.71.220 - - [03/Feb/2025:16:23:42 +0100] "GET /content.php HTTP/1.1" 404 32647 164.92.71.220 - - [03/Feb/2025:16:23:46 +0100] "GET /upfile.php HTTP/1.1" 404 32647 164.92.71.220 - - [03/Feb/2025:16:23:50 +0100] "GET /wp-conflg.php HTTP/1.1" 404 32647 164.92.71.220 - - [03/Feb/2025:16:23:53 +0100] "GET /bypass.php HTTP/1.1" 404 29043 ... show less	Web Spam Web App Attack
🇦🇺 paulshipley.com.au	2025-02-03 11:21:51 (1 year ago)	ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:22 +1100] "GET /wp-content/plugins/hellopres ... show more ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:22 +1100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 79029 "-" "-" ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:25 +1100] "GET /baindex.php HTTP/1.1" 404 78949 "-" "-" ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:27 +1100] "GET /wp-content/export.php HTTP/1.1" 404 78971 "-" "-" ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:30 +1100] "GET /ms.php HTTP/1.1" 404 78939 "-" "-" ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:32 +1100] "GET /.well-known/leafmailer.php HTTP/1.1" 404 78981 "-" "-" ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:35 +1100] "GET /pHpINJ.php HTTP/1.1" 404 78947 "-" "-" ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:40 +1100] "GET /xo.php HTTP/1.1" 404 78939 "-" "-" ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:43 +1100] "GET /DC.php HTTP/1.1" 404 78939 "-" "-" ccideas.com.au:443 164.92.71.220 - - [03/Feb/2025:22:21:45 ... show less	Web App Attack

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.46.0.71

🇵🇰 119.156.82.161

🇺🇸 93.152.208.26

🇧🇬 78.128.114.66

🇧🇷 45.205.1.242

🇧🇪 34.156.183.109

🇰🇷 1.212.225.99

🇺🇸 2a09:bac1:76c0:3d0::11:17a

🇧🇪 207.175.122.57

🇧🇷 205.210.31.207

🇺🇸 165.154.172.190

🇺🇸 147.185.132.184

🇧🇬 79.124.40.106

🇰🇼 37.34.237.45

🇺🇸 195.184.76.175

🇳🇱 195.178.110.137

🇦🇴 193.163.125.105

🇰🇷 180.71.9.31

🇰🇷 152.32.139.190

🇪🇬 105.197.230.219