92.118.39.58
Classification: Malicious
92.118.39.58 is a malicious IP address in Bucharest, RO. 3,472 sightings from 6 threat sources (Bruteforce, Mail Spammer), last seen 2026-11-06.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Blocklist.de | 2024-12-29 14:06:11 | 2026-11-06 12:04:15 | attacker malicious-activity | |
| IMAP Attacker | Blocklist.de | 2024-12-29 13:38:08 | 2026-11-06 11:03:40 | attacker malicious-activity | |
| Mail Attacker | OffSeq Mirage | 2026-09-25 06:00:00 | 2026-11-05 15:00:00 | attacker malicious-activity | T1071.003 T1078 T1110 T1566 |
| SIP Attacker | Blocklist.de | 2026-11-02 13:00:21 | 2026-11-02 13:00:21 | attacker malicious-activity | |
| Bruteforce | Blocklist.net.ua | 2026-09-07 16:01:19 | 2026-10-30 16:02:37 | attacker malicious-activity | |
| Honeypot Attacker | OffSeq Mirage | 2026-09-25 06:00:00 | 2026-10-24 20:00:00 | attacker malicious-activity | T1071.003 T1078 T1110 T1566 |
| Mail Spammer | Barracuda | 2024-12-29 00:15:21 | 2026-10-13 01:53:07 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2024-12-28 20:55:31 | 2026-10-13 01:34:09 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2024-12-28 22:28:57 | 2026-10-12 20:01:20 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2024-12-28 21:12:35 | 2026-10-12 18:59:36 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2024-12-28 21:12:35 | 2026-10-12 18:50:14 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2024-12-28 21:34:00 | 2026-10-12 15:15:32 | attacker malicious-activity reconnaissance | |
| IMAP Attacker | AbuseIPDB | 2024-12-28 21:12:35 | 2026-10-12 08:02:07 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2024-12-28 22:31:04 | 2026-10-12 04:22:29 | attacker compromised malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-08-07 18:59:11 | 2026-10-12 04:22:29 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2024-12-28 22:28:57 | 2026-10-12 02:16:04 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2026-08-07 00:00:00 | 2026-10-12 00:00:00 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2024-12-28 21:39:56 | 2026-10-11 22:05:21 | attacker malicious-activity | |
| Phishing | AbuseIPDB | 2024-12-28 21:12:35 | 2026-10-07 01:35:18 | malicious-activity phishing | |
| SIP Attacker | AbuseIPDB | 2026-09-07 12:11:03 | 2026-09-23 07:44:36 | attacker malicious-activity | |
| Proxy | AbuseIPDB | 2026-09-12 12:14:26 | 2026-09-12 12:14:26 | anonymization | |
| Suspicious Host | AbuseIPDB | 2025-02-26 01:10:16 | 2025-12-08 00:49:33 | anomalous-activity | |
| DDoS attack | AbuseIPDB | 2024-12-28 22:50:10 | 2024-12-28 23:09:56 | malicious-activity | |
| SQL Injection | AbuseIPDB | 2024-12-28 21:47:05 | 2024-12-28 21:47:05 | malicious-activity |
Tags
attacker imap pop3 sasl bot mail spam abuse mail-bruteforce sip bruteforceWhois information
- AS name
- AS47890 DMZHOST
- AS registry
- ripencc
- AS date
- 2019-03-04 00:00:00
- AS CIDR
- 92.118.39.0/24
- Registrant
- DMZHOST
- City
- Bucharest
- Postal code
- 040151
- Country
- RO — Romania 🇷🇴
- First indexed
- 2024-12-29 00:15:19
- Last updated
- 2026-11-06 12:04:15
Malicious IPs in the same CIDR
92.118.39.108 92.118.39.240 92.118.39.181 92.118.39.246 92.118.39.77 92.118.39.14 92.118.39.71 92.118.39.229 92.118.39.65 92.118.39.120 92.118.39.58 92.118.39.18 92.118.39.93 92.118.39.92 92.118.39.63 92.118.39.204 92.118.39.212 92.118.39.214 92.118.39.205 92.118.39.209 92.118.39.213 92.118.39.202 92.118.39.203 92.118.39.210 92.118.39.56