This IP address has been reported a total of
21
times from
13 distinct
sources.
164.92.81.9 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.81.9 (US/United States/-): 2 i ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 164.92.81.9 (US/United States/-): 2 in the last 3600 secs (0-196)
show less
2026-08-27T09:08:02.075762+02:00 vm1386.de.snk.wtf sshd[288311]: error: kex_exchange_identification: ...
show more2026-08-27T09:08:02.075762+02:00 vm1386.de.snk.wtf sshd[288311]: error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1"
2026-08-27T09:08:02.076286+02:00 vm1386.de.snk.wtf sshd[288311]: banner exchange: Connection from 164.92.81.9 port 45134: invalid format
...
show less
๐ก๏ธ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 60000
GET /
User-Agent: Mozilla/5.0 (X11; Linux x ...
show more๐ก๏ธ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 60000
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate; 60000 [2] TCP
show less
Port Scan on Honeypot | Ports: 3306/MySQL | Proto: TCP(1) | Flags: all SYN | TTL: 240 | Len: 44B | W ...
show morePort Scan on Honeypot | Ports: 3306/MySQL | Proto: TCP(1) | Flags: all SYN | TTL: 240 | Len: 44B | Win: 1025(1) | F2B/ufw-honeypot@2026-08-23T10:13:36Z
show less