AbuseIPDB » 164.92.81.21
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example previewIP Abuse Reports for 164.92.81.21:
This IP address has been reported a total of 8 times from 7 distinct sources. 164.92.81.21 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 4 reports; United States of America with 3 reports; Finland with 1 report. The most common categories in these recent reports were: Port Scan 6 times; Hacking 3 times; Web App Attack 3 times; Brute-Force 1 time.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇩🇪 EGP Abuse Dept |
Scanning for port/service exploits on tpc-055.mach3builders.nl
|
Port Scan Hacking | ||
| 🇺🇸 MPL |
tcp/1000
|
Port Scan | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| Anonymous |
Detected and banned by Fail2Ban jail nginx-forbidden on SAR reverse proxy
|
Web App Attack | ||
| Anonymous |
denied traffic to a honeypot network. destination port 8082.
|
Port Scan Hacking | ||
| 🇫🇮 JRID |
Detected by CrowdSec + Suricata IDS: automated attack/scan against web servers.
|
Brute-Force Web App Attack | ||
| 🇺🇸 RAP |
2026-08-23 13:41:34 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | ||
| Anonymous |
denied traffic to a honeypot network. destination port 8080.
|
Port Scan Hacking |
Showing 1 to 8 of 8 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩