JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 164.92.96.91

164.92.96.91 was found in our database!

This IP was reported 218 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 164.92.96.91

Whois 164.92.96.91

IP Abuse Reports for 164.92.96.91:

This IP address has been reported a total of 218 times from 156 distinct sources. 164.92.96.91 was first reported on March 1st 2023, and the most recent report was 20 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bartekl1	2026-07-07 17:07:04 (20 minutes ago)	2026-07-07T18:51:31.642353+02:00 rpi4 sshd[1499689]: Invalid user admin from 164.92.96.91 port 36370 ... show more 2026-07-07T18:51:31.642353+02:00 rpi4 sshd[1499689]: Invalid user admin from 164.92.96.91 port 36370 2026-07-07T18:56:21.525672+02:00 rpi4 sshd[1500620]: Invalid user dni from 164.92.96.91 port 51620 2026-07-07T18:57:54.074630+02:00 rpi4 sshd[1500925]: Invalid user three from 164.92.96.91 port 39628 2026-07-07T19:05:31.862128+02:00 rpi4 sshd[1502555]: Invalid user roberto from 164.92.96.91 port 39578 2026-07-07T19:07:03.387708+02:00 rpi4 sshd[1502843]: Invalid user vernon from 164.92.96.91 port 51026 ... show less	Brute-Force SSH
🇩🇪 SwinT	2026-07-07 17:00:04 (27 minutes ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇩🇪 pnpde.social	2026-07-07 16:55:20 (32 minutes ago)	2026-07-07T18:52:08.231435+02:00 weberin sshd[2920616]: Failed password for invalid user admin from ... show more 2026-07-07T18:52:08.231435+02:00 weberin sshd[2920616]: Failed password for invalid user admin from 164.92.96.91 port 53160 ssh2 2026-07-07T18:53:41.721100+02:00 weberin sshd[2920658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.96.91 user=root 2026-07-07T18:53:43.650809+02:00 weberin sshd[2920658]: Failed password for root from 164.92.96.91 port 36854 ssh2 2026-07-07T18:55:17.699143+02:00 weberin sshd[2920735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.96.91 user=root 2026-07-07T18:55:20.145795+02:00 weberin sshd[2920735]: Failed password for root from 164.92.96.91 port 55432 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-07 16:44:22 (43 minutes ago)	2026-07-07T16:44:20.814661+00:00 mail sshd[89885]: Failed password for root from 164.92.96.91 port 4 ... show more 2026-07-07T16:44:20.814661+00:00 mail sshd[89885]: Failed password for root from 164.92.96.91 port 43008 ssh2 2026-07-07T16:44:21.414603+00:00 mail sshd[89885]: Disconnected from authenticating user root 164.92.96.91 port 43008 [preauth] ... show less	Brute-Force SSH
🇺🇸 psh-ack	2026-07-07 16:42:00 (45 minutes ago)	Credential compromise attempts via libssh 0.9.6: tested pairs 345gs5662d34/345gs5662d34, root/3245gs ... show more Credential compromise attempts via libssh 0.9.6: tested pairs 345gs5662d34/345gs5662d34, root/3245gs5662d34, root/geraldine across 3 sessions. Successful auth led to SSH key injection: removed .ssh dir (rm -rf .ssh), recreated it, injected RSA pubkey AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXx into authorized_keys for persistent backdoor. Secondary cmds: chattr -ia and lockr -ia targeting .ssh dir. chattr removes immutable/append-only flags; lockr appears non-standard, likely custom persistence/anti-forensics tool. Attack demonstrates SSH config recon, cred stuffing, SSH key backdoor install, attribute manipulation for privilege escalation and persistence hardening. All activity within 7-sec window indicating automated/scripted execution. show less	Brute-Force SSH
🇯🇵 kipfel★	2026-07-07 16:09:16 (1 hour ago)	2026-07-08T01:07:40.056027+09:00 lw-vm-v1-nrt sshd[1222098]: Failed password for root from 164.92.96 ... show more 2026-07-08T01:07:40.056027+09:00 lw-vm-v1-nrt sshd[1222098]: Failed password for root from 164.92.96.91 port 56246 ssh2 2026-07-08T01:09:13.442364+09:00 lw-vm-v1-nrt sshd[1223102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.96.91 user=root 2026-07-08T01:09:15.102637+09:00 lw-vm-v1-nrt sshd[1223102]: Failed password for root from 164.92.96.91 port 50802 ssh2 ... show less	Brute-Force SSH
🇩🇪 pigro	2026-07-07 16:06:31 (1 hour ago)	Jul 7 17:53:47 vps-07b0f6cf sshd[1682062]: User root from 164.92.96.91 not allowed because not list ... show more Jul 7 17:53:47 vps-07b0f6cf sshd[1682062]: User root from 164.92.96.91 not allowed because not listed in AllowUsers Jul 7 18:06:31 vps-07b0f6cf sshd[1682141]: User root from 164.92.96.91 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇮🇹 marmila	2026-07-07 15:53:35 (1 hour ago)	SSH unauthorized access via Cowrie honeypot	SSH
🇩🇪 vmd56152.contaboserver.net	2026-07-07 15:30:45 (1 hour ago)	2026-07-07T17:25:06.935141 vmd56152.contaboserver.net sshd[3239469]: pam_unix(sshd:auth): authentica ... show more 2026-07-07T17:25:06.935141 vmd56152.contaboserver.net sshd[3239469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.96.91 2026-07-07T17:25:08.901791 vmd56152.contaboserver.net sshd[3239469]: Failed password for invalid user ftpuser from 164.92.96.91 port 50640 ssh2 2026-07-07T17:26:58.194330 vmd56152.contaboserver.net sshd[3239699]: Invalid user ubuntu from 164.92.96.91 port 46480 2026-07-07T17:26:58.204033 vmd56152.contaboserver.net sshd[3239699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.96.91 2026-07-07T17:27:00.187354 vmd56152.contaboserver.net sshd[3239699]: Failed password for invalid user ubuntu from 164.92.96.91 port 46480 ssh2 2026-07-07T17:28:50.907754 vmd56152.contaboserver.net sshd[3239972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.96.91 user=root 2026-07-07T17:28:52.934245 vmd56152.contaboserver.net sshd[3239972]: Faile ... show less	Brute-Force SSH
🇩🇪 nohacefaltapapel-et.net	2026-07-07 15:28:27 (1 hour ago)	2026-07-07T17:18:46.201945optasports sshd[9883]: Invalid user alex from 164.92.96.91 port 33774 2026 ... show more 2026-07-07T17:18:46.201945optasports sshd[9883]: Invalid user alex from 164.92.96.91 port 33774 2026-07-07T17:26:33.544702optasports sshd[10019]: Invalid user ftpuser from 164.92.96.91 port 44672 2026-07-07T17:28:26.654151optasports sshd[10036]: Invalid user ubuntu from 164.92.96.91 port 36372 ... show less	Brute-Force SSH
🇩🇪 venko	2026-07-07 15:21:02 (2 hours ago)	F2B/SSH	Brute-Force SSH
🇭🇰 bluecloudwork	2026-07-07 15:18:44 (2 hours ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇺🇸 yzfdude1	2026-07-07 15:17:38 (2 hours ago)	Jul 7 09:15:37 b146-48 sshd[244700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Jul 7 09:15:37 b146-48 sshd[244700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.96.91 user=root Jul 7 09:15:39 b146-48 sshd[244700]: Failed password for root from 164.92.96.91 port 38464 ssh2 Jul 7 09:17:37 b146-48 sshd[244729]: Invalid user alex from 164.92.96.91 port 55768 ... show less	Brute-Force SSH
🇺🇸 ShadowWhisperer	2026-07-07 15:12:36 (2 hours ago)	botnet node - cryptominer (outlaw/mdrfckr) [worm, crypto, infected, backdoor]	Brute-Force SSH Hacking Exploited Host
🇬🇧 Russ Hore	2026-07-07 13:51:52 (3 hours ago)	2026-07-07T14:47:47.018957+01:00 ubuntu sshd[96755]: Failed password for root from 164.92.96.91 port ... show more 2026-07-07T14:47:47.018957+01:00 ubuntu sshd[96755]: Failed password for root from 164.92.96.91 port 60988 ssh2 2026-07-07T14:49:45.756149+01:00 ubuntu sshd[96777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.96.91 user=root 2026-07-07T14:49:47.637581+01:00 ubuntu sshd[96777]: Failed password for root from 164.92.96.91 port 43316 ssh2 2026-07-07T14:51:49.254171+01:00 ubuntu sshd[96789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.92.96.91 user=root 2026-07-07T14:51:51.823435+01:00 ubuntu sshd[96789]: Failed password for root from 164.92.96.91 port 38284 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 218 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.213.135.6

🇺🇸 138.197.15.3

🇺🇸 91.230.168.138

🇺🇸 45.138.100.250

🇬🇧 35.203.210.230

🇹🇭 223.205.64.193

🇨🇱 216.155.93.75

🇩🇪 178.104.113.85

🇸🇬 172.217.44.215

🇨🇳 163.142.84.149

🇨🇦 159.203.12.182

🇨🇭 104.244.74.84

🇸🇳 41.214.3.225

🇻🇳 14.224.227.189

🇩🇪 213.209.159.238

🇺🇸 209.50.173.54

🇲🇽 201.147.171.170

🇩🇪 109.94.96.211

🇮🇹 57.131.38.229

🇫🇷 51.159.149.103