JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

92.204.172.236

Neutral Activity

Abuse Confidence Score

0% Low Risk

96 reports

53 reporters · latest 9 months ago

ISP: velia.net Internetdienste GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS29066
Domain Name: velia.net
Country: 🇫🇷 France
City: Strasbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

92.204.172.236 has been reported 96 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

96 from 53 distinct reporters

First reported

January 26th 2026

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-02-03 20:11:23 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/5061	Brute-Force
🇹🇷 rtbh.com.tr	2026-02-03 04:11:21 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/5060	Brute-Force
🇧🇪 Satas	2026-01-29 15:24:54 UTC · (9 months ago)	Detected port scanning activity (SIP/VoIP scanner).	Fraud VoIP Port Scan Hacking Brute-Force
🇩🇪 phil2k	2026-01-29 12:02:34 UTC · (9 months ago)	ICMP + TCP & UDP portscan on multiple ports : Firewall within 2026-01-26 11:54:24 - 2026-01-28 01:00:17 CET(+0100) identified: unallowed access from 92.204.172.236/32 on uncommon port/s: sip-tls(5061),sip(5060) (2 trials) Fail2ban within 2026-01-26 1 ... show more ICMP + TCP & UDP portscan on multiple ports : Firewall within 2026-01-26 11:54:24 - 2026-01-28 01:00:17 CET(+0100) identified: unallowed access from 92.204.172.236/32 on uncommon port/s: sip-tls(5061),sip(5060) (2 trials) Fail2ban within 2026-01-26 11:54:24 - 2026-01-28 01:00:17 CET(+0100) banned: 5 times by fail2ban[firewall] show less	Ping of Death Port Scan
🇧🇪 Satas	2026-01-28 12:41:05 UTC · (9 months ago)	Detected port scanning activity (SIP/VoIP scanner).	Fraud VoIP Port Scan Hacking Brute-Force
Anonymous	2026-01-28 03:14:55 UTC · (9 months ago)	2026-01-28T04:14:54.606061+01:00 vps kernel: [31310373.768782] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=92.204.172.236 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=52520 PROTO=TCP SPT=53874 DPT=5061 ... show more 2026-01-28T04:14:54.606061+01:00 vps kernel: [31310373.768782] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=92.204.172.236 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=52520 PROTO=TCP SPT=53874 DPT=5061 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 iNetWorker	2026-01-28 03:10:52 UTC · (9 months ago)	firewall-block, port(s): 5061/tcp	Port Scan
🇺🇸 cazae	2026-01-28 03:09:07 UTC · (9 months ago)	Unauthorized attempt on debian [5061/tcp] Source port: 53858 TTL: 238 Packet length: 44 TOS: 0x08 https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Fraud VoIP Port Scan
🇩🇪 Admins@FBN	2026-01-28 02:10:21 UTC · (9 months ago)	FW-PortScan: Traffic Blocked srcport=53858 dstport=5061	Port Scan
🇦🇺 trentwiles.com	2026-01-28 01:30:02 UTC · (9 months ago)	Unauthorized connection attempt detected from IP address 92.204.172.236 to port 5061 [SYD]	Port Scan
🇺🇸 MPL	2026-01-28 00:01:45 UTC · (9 months ago)	tcp/5061 (10 or more attempts)	Port Scan
🇺🇸 MPL	2026-01-27 22:47:36 UTC · (9 months ago)	tcp/5061 (7 or more attempts)	Port Scan
🇳🇱 VMHeaven.io	2026-01-27 22:36:00 UTC · (9 months ago)	Blocked by UFW [5061/tcp] Source port: 53858 TTL: 240 Packet length: 44	Port Scan
🇬🇧 Andrew	2026-01-27 22:10:45 UTC · (9 months ago)	Blocked by UFW (TCP on port 5061). Source port: 53874 TTL: 244 Packet length: 44 TOS: 0x00 This report (for 92.204.172.236) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2026-01-27 21:28:29 UTC · (9 months ago)	Jan 26 10:41:57 localhost kernel: [97787683.858210] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=92.204.172.236 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=237 ID=23976 PROTO=TCP SPT=59075 DPT=5060 WINDOW=10 ... show more Jan 26 10:41:57 localhost kernel: [97787683.858210] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=92.204.172.236 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=237 ID=23976 PROTO=TCP SPT=59075 DPT=5060 WINDOW=1025 RES=0x00 SYN URGP=0 Jan 26 10:41:57 localhost kernel: [97787683.858239] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=92.204.172.236 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=237 ID=23976 PROTO=TCP SPT=59075 DPT=5060 SEQ=2707303954 ACK=0 WINDOW=1025 RES=0x00 SYN URGP=0 OPT (020405B4) Jan 27 16:28:29 localhost kernel: [97894873.158084] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=92.204.172.236 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x40 TTL=237 ID=26509 PROTO=TCP SPT=53858 DPT=5061 WINDOW=1025 RES=0x00 SYN URGP=0 Jan 27 16:28:29 localhost kernel: [97894873.158108] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=92.204.172.236 DST=[mungedIP show less	Port Scan

Showing 1 to 15 of 96 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 213.209.159.142

🇲🇽 189.194.140.170

🇸🇬 180.255.113.158

🇬🇧 143.110.168.230

🇺🇸 137.184.71.20

🇨🇳 124.74.97.18

🇳🇱 94.102.49.190

🇮🇳 59.180.86.39

🇫🇮 31.76.8.208

🇳🇱 213.209.159.242

🇺🇸 173.21.24.119

🇺🇸 66.132.186.228

🇵🇰 45.194.15.143

🇬🇧 35.203.210.226

🇺🇿 195.158.26.59

🇵🇱 172.64.198.150

🇺🇸 167.172.150.74

🇮🇳 157.51.93.118

🇫🇮 155.212.108.157

🇺🇸 129.121.139.180