Substantial Risk
IP 164.92.165.52 is a high-risk address with a threat level of 8/10 that has accumulated 648 abuse reports documenting unauthorized intrusion attempts and port-scanning reconnaissance originating from DigitalOcean's AS14061 network in Germany.
Tracked between October 2025 and April 2026, automated honeypot sensors flagged this address repeatedly, with recent submissions indicating 20 hacking-related incidents and 1 port-scanning report. Detection systems identified inbound connections using Zmap, a recognized network scanning utility, signaling deliberate reconnaissance operations against exposed services. The confidence score stands at 59%, reflecting moderate certainty in the threat attribution. The substantial report volume and confirmed scanning tool signatures suggest this address has been actively leveraged for systematic network enumeration rather than opportunistic probing.
Port scanning serves as an initial reconnaissance phase, mapping open services and potential vulnerabilities before launching targeted attacks. When paired with documented hacking activity, this combination indicates a threat actor attempting to identify and exploit weak points in exposed infrastructure. The use of automated scanning tools enables rapid, large-scale probing that can quickly identify vulnerable targets for subsequent unauthorized access attempts.
Network administrators should consider blocking this IP at the firewall level to prevent further reconnaissance and intrusion attempts. Implementing automated response tools such as fail2ban can help dynamically block repeated connection attempts. Systems should be kept fully patched, with particular attention to services exposed to the internet. Strong authentication controls, including rate-limiting and account lockout policies, provide additional defense against the types of unauthorized access attempts this address has demonstrated.
NL 
GB 
SG 
CA 
KR 
PH 
HU 
TR 
AE 
SE 
ID 
SD 
MX