92.118.39.108
Classification: Malicious
92.118.39.108 is a malicious IP address in Bucharest, RO. 369 sightings from 6 threat sources (Bruteforce, Port Scanner), last seen 2026-11-06.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Unauthorized scanning of hosts | Blocklist.net.ua | 2026-11-06 16:02:04 | 2026-11-06 16:02:04 | malicious-activity reconnaissance | |
| Port Scanner | AbuseIPDB | 2026-09-04 05:06:14 | 2026-11-06 14:01:52 | malicious-activity reconnaissance | |
| DDoS Attacker | AbuseIPDB | 2026-09-07 23:10:48 | 2026-11-06 13:56:27 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-09-20 16:04:06 | 2026-11-06 12:28:28 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-08-14 22:51:39 | 2026-11-06 12:28:28 | attacker malicious-activity | |
| Known Attacker | AbuseIPDB | 2026-11-06 11:05:50 | 2026-11-06 11:05:50 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-08-14 22:51:39 | 2026-11-06 08:34:25 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-09-15 19:29:04 | 2026-11-06 01:30:10 | attacker compromised malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-09-06 20:45:23 | 2026-11-06 00:28:24 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-09-21 15:57:02 | 2026-09-21 15:57:02 | attacker malicious-activity | |
| Bruteforce | Blocklist.net.ua | 2026-09-07 16:01:19 | 2026-09-07 16:01:19 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2026-03-29 23:13:49 | 2026-04-19 23:10:55 | anomalous-activity | |
| SSH Attacker | Blocklist.de | 2026-03-30 10:03:56 | 2026-04-07 10:04:45 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2023-11-01 13:21:06 | 2023-12-07 13:48:46 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2023-11-01 13:20:58 | 2023-12-07 13:48:37 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2023-10-31 07:49:09 | 2023-12-05 08:10:48 | attacker malicious-activity | |
| Bruteforce login attacker | Blocklist.de | 2023-02-26 02:05:34 | 2023-06-10 03:20:57 | attacker malicious-activity | |
| HTTP Attacker | Blocklist.de | 2023-02-26 01:50:38 | 2023-06-10 03:04:12 | attacker malicious-activity | |
| HTTP Attacker | Maltiverse | 2023-02-16 15:20:44 | 2023-02-16 23:46:19 | attacker malicious-activity | |
| Hacking | Maltiverse | 2023-02-15 03:47:35 | 2023-02-16 23:46:19 | attacker malicious-activity | |
| HTTP Scrapper | Maltiverse | 2023-02-16 20:03:19 | 2023-02-16 20:03:19 | anomalous-activity | |
| Port Scanner | Maltiverse | 2023-02-15 03:47:35 | 2023-02-16 17:39:59 | anomalous-activity reconnaissance | |
| Bruteforce | Maltiverse | 2023-02-15 05:45:09 | 2023-02-15 05:45:09 | attacker malicious-activity |
Tags
attacker login bruteforce bot joomla wordpress apache ddos rfi ssh abuseWhois information
- AS name
- AS47890 DMZHOST
- AS registry
- ripencc
- AS date
- 2019-03-04 00:00:00
- AS CIDR
- 92.118.39.0/24
- CIDR
- 92.118.39.0/24
- Registrant
- DMZHOST
- Address
- 35 Firs Avenue, London, England, N11 3NE
- City
- Bucharest
- Postal code
- 040151
- Country
- RO — Romania 🇷🇴
- Contact email
- [email protected]
- First indexed
- 2023-02-17 01:56:41
- Last updated
- 2026-11-07 03:08:54
Malicious IPs in the same CIDR
92.118.39.108 92.118.39.240 92.118.39.181 92.118.39.246 92.118.39.77 92.118.39.14 92.118.39.71 92.118.39.229 92.118.39.65 92.118.39.120 92.118.39.58 92.118.39.18 92.118.39.93 92.118.39.92 92.118.39.63 92.118.39.204 92.118.39.212 92.118.39.214 92.118.39.205 92.118.39.209 92.118.39.213 92.118.39.202 92.118.39.203 92.118.39.210 92.118.39.56