92.118.39.240

Classification: Malicious

92.118.39.240 is a malicious IP address in Bucharest, RO. 526 sightings from 5 threat sources (DDoS Attacker, Mail Spammer), last seen 2026-11-06.

Current activity

  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Unauthorized scanning of hosts Blocklist.net.ua 2026-11-06 16:02:04 2026-11-06 16:02:04 malicious-activity reconnaissance
Suspicious Host AbuseIPDB 2024-08-10 00:08:38 2026-04-18 22:58:13 anomalous-activity
DDoS Attacker Blocklist.net.ua 2023-05-31 07:07:20 2024-11-24 13:02:55 malicious-activity
HTTP Spammer StopForumSpam.com 2023-07-07 20:16:48 2024-09-04 02:39:15 malicious-activity
Malicious Host AbuseIPDB 2024-07-01 18:13:26 2024-08-01 00:03:13 malicious-activity
Known attacker Blocklist.de 2024-02-12 02:40:50 2024-06-18 03:10:56 malicious-activity
HTTP Attacker Blocklist.de 2023-05-22 03:25:36 2024-06-06 02:22:59 malicious-activity
Bruteforce Blocklist.net.ua 2024-01-01 05:02:33 2024-05-18 08:57:07 malicious-activity
Mail Spammer Blocklist.de 2023-10-27 03:02:20 2024-04-26 03:33:05 malicious-activity
IMAP Attacker Blocklist.de 2023-10-27 02:49:37 2024-04-26 03:10:14 malicious-activity
Brute force attack on the SMTP service of the server RS1 Blocklist.net.ua 2024-04-09 07:14:56 2024-04-09 07:14:56 malicious-activity
Brute force attack on the SMTP service of the server S4 Blocklist.net.ua 2024-03-09 05:40:32 2024-03-09 05:40:32 malicious-activity
Brute force attack on the SMTP service of the server S25 Blocklist.net.ua 2024-02-27 05:45:41 2024-02-27 05:45:41 malicious-activity
SIP Attacker Blocklist.de 2024-02-27 03:32:18 2024-02-27 03:32:18 malicious-activity
Brute force attack on the SMTP service of the server S1-RU Blocklist.net.ua 2024-01-02 05:14:45 2024-01-02 05:14:45 malicious-activity
HTTP Attacker Maltiverse 2023-05-18 02:30:54 2023-05-22 02:05:19 malicious-activity
Bruteforce Maltiverse 2023-05-15 02:29:54 2023-05-21 22:22:46 malicious-activity
Hacking Maltiverse 2023-05-15 02:29:54 2023-05-21 19:26:03 malicious-activity
Malicious Host Maltiverse 2023-05-21 17:38:49 2023-05-21 17:38:49 compromised malicious-activity
SQL Injection Maltiverse 2023-05-20 09:50:34 2023-05-21 17:38:49 malicious-activity
HTTP Scrapper Maltiverse 2023-05-20 08:09:34 2023-05-21 16:54:12 anomalous-activity
SSH Attacker Maltiverse 2023-05-20 01:36:41 2023-05-20 01:36:41 malicious-activity

Tags

abuse bot apache ddos rfi attacker imap pop3 sasl mail spam strong+attacker sip bruteforce

Whois information

AS name
AS47890 DMZHOST
AS registry
ripencc
AS date
2019-03-04 00:00:00
AS CIDR
92.118.39.0/24
CIDR
92.118.39.0/24
Registrant
https://dmzhost.co
Address
35 Firs Avenue, London, England, N11 3NE
City
Bucharest
Postal code
030163
Country
RO — Romania 🇷🇴
Contact email
[email protected]
First indexed
2023-05-22 03:25:36
Last updated
2026-11-06 16:02:04

Malicious IPs in the same CIDR

92.118.39.108 92.118.39.240 92.118.39.181 92.118.39.246 92.118.39.77 92.118.39.14 92.118.39.71 92.118.39.229 92.118.39.65 92.118.39.120 92.118.39.58 92.118.39.18 92.118.39.93 92.118.39.92 92.118.39.63 92.118.39.204 92.118.39.212 92.118.39.214 92.118.39.205 92.118.39.209 92.118.39.213 92.118.39.202 92.118.39.203 92.118.39.210 92.118.39.56