92.118.39.93

Classification: Malicious

92.118.39.93 is a malicious IP address in Bucharest, RO. 22,492 sightings from 6 threat sources (Bruteforce, SSH Attacker), last seen 2026-11-06.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
HTTP Attacker Blocklist.de 2023-02-28 01:55:14 2026-11-06 07:00:47 attacker malicious-activity
Bruteforce login attacker Blocklist.de 2026-10-16 09:00:55 2026-11-04 09:00:34 attacker malicious-activity
HTTP bot Blocklist.de 2026-10-17 08:01:33 2026-11-01 08:01:02 attacker malicious-activity
Unauthorized scanning of hosts Blocklist.net.ua 2024-12-08 15:43:55 2026-10-16 16:19:35 attacker malicious-activity reconnaissance
Port Scanner AbuseIPDB 2025-01-20 05:54:05 2026-09-21 03:22:02 attacker malicious-activity reconnaissance
HTTP Attacker AbuseIPDB 2025-04-16 06:06:37 2026-09-21 01:59:23 attacker malicious-activity
Hacking AbuseIPDB 2025-02-08 15:53:59 2026-09-21 00:02:56 attacker malicious-activity
Bruteforce AbuseIPDB 2025-01-20 05:54:05 2026-09-21 00:02:56 attacker malicious-activity
SSH Attacker AbuseIPDB 2025-04-16 06:04:13 2026-09-21 00:02:56 attacker malicious-activity
HTTP Scrapper AbuseIPDB 2026-09-18 20:10:24 2026-09-20 18:40:02 attacker malicious-activity
Malicious Host AbuseIPDB 2025-04-16 10:35:02 2026-09-20 09:17:13 attacker compromised malicious-activity
Phishing AbuseIPDB 2026-09-20 07:21:04 2026-09-20 07:21:04 malicious-activity phishing
Mail Spammer AbuseIPDB 2025-01-20 05:54:05 2026-09-19 13:35:12 attacker malicious-activity
SSH Attacker Blocklist.de 2025-04-17 15:48:11 2025-05-25 09:47:25 attacker malicious-activity
Suspicious Host AbuseIPDB 2025-01-09 13:25:18 2025-02-08 15:58:12 anomalous-activity
Proxy AbuseIPDB 2025-01-25 16:18:29 2025-01-25 16:18:29 anonymization proxy
IMAP Attacker AbuseIPDB 2025-01-20 05:54:05 2025-01-21 12:51:22 attacker malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2023-03-01 08:35:48 2023-03-06 08:44:16 attacker malicious-activity
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2023-03-01 08:35:43 2023-03-06 08:44:11 attacker malicious-activity
Malicious Host CIArmy 2023-02-28 06:25:33 2023-03-03 06:44:31 attacker malicious-activity
Bruteforce Maltiverse 2023-01-12 09:47:12 2023-02-27 11:45:04 attacker malicious-activity
HTTP Attacker Maltiverse 2023-02-27 11:05:24 2023-02-27 11:43:53 attacker malicious-activity
Hacking Maltiverse 2023-02-27 11:40:46 2023-02-27 11:43:35 attacker malicious-activity
Port Scanner Maltiverse 2023-02-27 10:52:37 2023-02-27 11:35:53 anomalous-activity reconnaissance
HTTP Scrapper Maltiverse 2023-02-27 10:51:09 2023-02-27 11:10:06 anomalous-activity
SSH Attacker Maltiverse 2023-01-12 09:47:12 2023-02-07 08:53:36 attacker malicious-activity

Tags

apache ddos rfi attacker abuse ssh bruteforce bot login joomla wordpress spam

Whois information

AS name
AS47890 DMZHOST
AS registry
ripencc
AS date
2019-03-04 00:00:00
AS CIDR
92.118.39.0/24
CIDR
92.118.39.0/24
Registrant
DMZHOST
Address
35 Firs Avenue, London, England, N11 3NE
City
Bucharest
Postal code
040151
Country
RO — Romania 🇷🇴
Contact email
[email protected]
First indexed
2023-02-27 11:45:28
Last updated
2026-11-06 07:00:47

Malicious IPs in the same CIDR

92.118.39.108 92.118.39.240 92.118.39.181 92.118.39.246 92.118.39.77 92.118.39.14 92.118.39.71 92.118.39.229 92.118.39.65 92.118.39.120 92.118.39.58 92.118.39.18 92.118.39.93 92.118.39.92 92.118.39.63 92.118.39.204 92.118.39.212 92.118.39.214 92.118.39.205 92.118.39.209 92.118.39.213 92.118.39.202 92.118.39.203 92.118.39.210 92.118.39.56