116.203.127.92

Classification: Malicious

116.203.127.92 is a malicious IP address in Nuremberg, DE. 100 sightings from 15 threat sources (Proxy, HTTP Spammer), last seen 2026-10-17.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Proxy IPWhois.io 2026-10-17 19:45:42 2026-10-17 19:45:42 anonymization proxy
Mail Spammer Barracuda 2026-10-17 19:45:42 2026-10-17 19:45:42 attacker malicious-activity
Proxy FireHOL 2023-01-01 18:33:12 2025-10-07 04:59:07 anonymization
Anonymizer FireHol 2022-12-30 07:34:00 2022-12-30 07:34:00 anonymization
Anonymizer Maltiverse Research Team 2020-11-21 21:58:31 2021-05-23 08:45:54 anonymizer
SSH Attacker Blocklist.de 2019-12-10 00:48:26 2020-02-09 07:06:07
DDoS attack Blocklist.net.ua 2019-08-17 00:51:24 2020-01-27 07:02:29
Malicious Host HoneyDB 2019-12-15 00:00:00 2020-01-12 00:00:00
Malicious host Darklist 2020-01-11 01:19:18 2020-01-11 01:19:18
SIP Attacker Blocklist.de 2019-12-20 00:47:28 2020-01-05 07:10:48
SSH Attacker Telefonica CO SOC 2019-12-11 13:58:02 2020-01-02 10:58:03
Parasite SEO Blocklist.net.ua 2019-11-25 00:52:55 2019-11-25 07:18:17
Parasite traffic on site prazdnik-studija.com.ua. Blocklist.net.ua 2019-11-24 00:52:10 2019-11-24 07:22:01
Bruteforce login attacker Blocklist.de 2019-08-01 06:55:47 2019-11-22 07:03:35
HTTP Attacker Blocklist.de 2019-08-01 06:52:25 2019-11-22 07:00:32
HTTP Spammer Botscout 2019-10-23 01:06:36 2019-10-23 01:06:36
HTTP Spammer Cleantalk.org 2019-10-14 01:12:26 2019-10-14 07:37:14
HTTP Spammer Sblam 2019-10-02 09:09:26 2019-10-02 09:09:26
HTTP Spammer StopForumSpam.com 2019-08-07 02:34:46 2019-08-07 02:34:46
Anonymizer Maltiverse 2019-07-15 08:36:57 2019-07-15 08:36:57

Tags

anonymization anonymizer apache ddos rfi attacker login bruteforce bot joomla wordpress abuse ssh sip

Whois information

AS name
AS24940 Hetzner Online GmbH
AS registry
ripencc
AS date
2011-01-17 00:00:00
AS CIDR
116.203.0.0/16
Registrant
Hetzner Online GmbH
City
Nuremberg
Postal code
90331
Country
DE — Germany 🇩🇪
First indexed
2019-07-15 08:36:57
Last updated
2026-10-17 19:45:43

Malicious IPs in the same CIDR

116.203.207.52 116.203.189.71 116.203.146.88 116.203.196.70 116.203.189.79 116.203.211.25 116.203.195.42 116.203.225.14 116.203.197.87 116.203.101.83 116.203.131.37 116.203.227.79 116.203.218.88 116.203.127.64 116.203.108.73 116.203.100.29 116.203.222.46 116.203.205.97 116.203.106.94 116.203.156.12 116.203.145.81 116.203.119.11 116.203.199.47 116.203.254.38 116.203.117.22