92.118.39.63

Classification: Malicious

92.118.39.63 is a malicious IP address in Bucharest, RO. 45,229 sightings from 5 threat sources (Bruteforce, SSH Attacker), last seen 2026-11-05.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
HTTP Attacker AbuseIPDB 2024-12-31 11:14:18 2026-11-05 10:04:08 attacker malicious-activity
Hacking AbuseIPDB 2024-12-31 11:12:20 2026-11-05 10:04:08 attacker malicious-activity
Known attacker Blocklist.de 2026-03-19 11:00:16 2026-10-26 15:00:11 attacker malicious-activity
SSH Attacker Blocklist.de 2025-06-08 09:34:11 2026-10-15 14:00:34 attacker malicious-activity
Port Scanner AbuseIPDB 2024-12-31 11:12:20 2026-10-15 03:00:02 malicious-activity reconnaissance
Bruteforce AbuseIPDB 2024-12-31 11:12:20 2026-10-15 03:00:02 attacker malicious-activity
SSH Attacker AbuseIPDB 2024-12-31 11:42:11 2026-10-15 03:00:02 attacker malicious-activity
Malicious Host HoneyDB 2026-02-25 00:00:00 2026-10-08 00:00:00 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2024-12-31 11:42:11 2026-08-29 00:55:28 anomalous-activity
Malware Download URLhaus Abuse.ch 2026-07-16 14:37:25 2026-07-16 14:40:25 malicious-activity malware
Malicious Host AbuseIPDB 2024-12-31 11:20:03 2026-06-04 06:27:53 attacker compromised malicious-activity
SIP Attacker Blocklist.de 2026-05-15 09:00:04 2026-06-02 08:03:16 attacker malicious-activity
DNS Compromise AbuseIPDB 2026-02-24 21:32:53 2026-04-28 22:17:59 compromised
DNS Poisoning AbuseIPDB 2026-02-24 21:32:53 2026-04-28 22:17:59 compromised
Known Attacker AbuseIPDB 2025-01-04 20:59:59 2026-04-28 22:17:59 malicious-activity
Mail Spammer AbuseIPDB 2024-12-31 11:14:18 2026-04-28 22:17:59 attacker malicious-activity
DDoS Attacker AbuseIPDB 2026-02-24 19:49:07 2026-04-28 22:17:59 attacker malicious-activity
FTP Attacker AbuseIPDB 2026-02-24 19:48:35 2026-04-28 21:05:31 attacker malicious-activity
Phishing AbuseIPDB 2024-12-31 11:17:15 2026-04-28 19:35:12 malicious-activity
IMAP Attacker AbuseIPDB 2024-12-31 11:32:43 2026-04-28 19:35:12 attacker malicious-activity
SQL Injection AbuseIPDB 2025-01-04 21:14:04 2026-04-23 14:53:23 malicious-activity
IoT Attacker AbuseIPDB 2026-02-24 19:58:30 2026-04-23 14:53:23 iot malicious-activity
Suspicious Host AbuseIPDB 2025-04-14 16:44:25 2025-09-03 11:50:14 anomalous-activity
Brute force attack on the SMTP service of the server S25 Blocklist.net.ua 2025-07-26 10:40:32 2025-07-26 10:40:32 malicious-activity
Bruteforce Blocklist.net.ua 2025-06-11 11:27:48 2025-06-11 11:27:48 attacker malicious-activity
DDoS attack AbuseIPDB 2024-12-31 11:27:52 2025-06-11 00:05:54 attacker malicious-activity
Mail Spammer Blocklist.de 2025-01-01 04:11:01 2025-02-23 13:54:26 attacker malicious-activity
IMAP Attacker Blocklist.de 2025-01-01 03:28:48 2025-02-23 13:14:12 attacker malicious-activity
Brute force attack on the SMTP service of the server S2 Blocklist.net.ua 2025-01-08 19:50:54 2025-01-08 19:50:54 malicious-activity

Tags

attacker imap pop3 sasl bot mail spam abuse ssh bruteforce strong+attacker sip elf mirai ua-wget

Whois information

AS name
AS47890 DMZHOST
AS registry
ripencc
AS date
2019-03-04 00:00:00
AS CIDR
92.118.39.0/24
Registrant
DMZHOST
City
Bucharest
Postal code
040151
Country
RO — Romania 🇷🇴
First indexed
2025-01-01 03:28:48
Last updated
2026-11-05 15:03:58

Malicious IPs in the same CIDR

92.118.39.108 92.118.39.240 92.118.39.181 92.118.39.246 92.118.39.77 92.118.39.14 92.118.39.71 92.118.39.229 92.118.39.65 92.118.39.120 92.118.39.58 92.118.39.18 92.118.39.93 92.118.39.92 92.118.39.63 92.118.39.204 92.118.39.212 92.118.39.214 92.118.39.205 92.118.39.209 92.118.39.213 92.118.39.202 92.118.39.203 92.118.39.210 92.118.39.56