AbuseIPDB » 62.92.89.220

Check an IP Address, Domain Name, or Subnet

e.g. 3.236.138.35, microsoft.com, or 5.188.10.0/24

62.92.89.220 was found in our database!

This IP was reported 1,511 times. Confidence of Abuse is 100%: ?

100%

ISP	Telenor Norge AS
Usage Type	Mobile ISP
Hostname(s)	220.89.92.62.static.cust.telenor.com
Domain Name	telenor.net
Country	Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 62.92.89.220

Whois 62.92.89.220

IP Abuse Reports for 62.92.89.220:

This IP address has been reported a total of 1,511 times from 286 distinct sources. 62.92.89.220 was first reported on December 17th 2020, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
Hirte	14 Mar 2021	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
Hirte	14 Mar 2021	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
TheMadBeaker	14 Mar 2021	Fail2Ban - HTTP Exploit Attempt	Brute-Force Web App Attack
dbip	08 Mar 2021	62.92.89.220 - - [08/Mar/2021:23:30:02 +0100] "POST /wp-login.php HTTP/1.1" 200 8857 "http://www.thi ... show more62.92.89.220 - - [08/Mar/2021:23:30:02 +0100] "POST /wp-login.php HTTP/1.1" 200 8857 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021:23:30:04 +0100] "POST /wp-login.php HTTP/1.1" 200 8857 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021:23:30:05 +0100] "POST /wp-login.php HTTP/1.1" 200 8857 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021:23:30:07 +0100] "POST /wp-login.php HTTP/1.1" 200 8857 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021:23:30:08 +0100] "POST /wp-login.php HTTP/1.1" 200 8857 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021: ... show less	Brute-Force Web App Attack
dbip	08 Mar 2021	62.92.89.220 - - [08/Mar/2021:20:38:24 +0100] "POST /wp-login.php HTTP/1.1" 200 8849 "http://www.thi ... show more62.92.89.220 - - [08/Mar/2021:20:38:24 +0100] "POST /wp-login.php HTTP/1.1" 200 8849 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021:20:38:26 +0100] "POST /wp-login.php HTTP/1.1" 200 8849 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021:20:38:27 +0100] "POST /wp-login.php HTTP/1.1" 200 8849 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021:20:38:29 +0100] "POST /wp-login.php HTTP/1.1" 200 8849 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021:20:38:30 +0100] "POST /wp-login.php HTTP/1.1" 200 8849 "http://www.thinklarge.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" 62.92.89.220 - - [08/Mar/2021: ... show less	Brute-Force Web App Attack
security.rdmc.fr	05 Mar 2021	Automatic report - Banned IP Access	Web App Attack
hosterpack.com	05 Mar 2021	(imapd) Failed IMAP login from 62.92.89.220 (NO/Norway/220.89.92.62.static.cust.telenor.com): 1 in t ... show more(imapd) Failed IMAP login from 62.92.89.220 (NO/Norway/220.89.92.62.static.cust.telenor.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Mar 5 10:56:29 ir1 dovecot[9799]: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=<[email protected]>, method=PLAIN, rip=62.92.89.220, lip=158.58.191.107, session=<2qs4AMW8d9I+XFnc> show less	Port Scan
samelarmain.com	04 Mar 2021	Mar 5 03:33:52 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 8 secs\): user=\ ... show moreMar 5 03:33:52 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 8 secs\): user=\<[email protected]\>, method=PLAIN, rip=62.92.89.220, lip=10.64.89.208, session=\<Mmq/6cC8KN8+XFnc\> Mar 5 04:56:26 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\<[email protected]\>, method=PLAIN, rip=62.92.89.220, lip=10.64.89.208, TLS, session=\<Y7QKEcK8/WA+XFnc\> ... show less	Hacking Brute-Force
micoots	04 Mar 2021	Cluster member 192.168.0.30 (-) said, DENY 62.92.89.220, Reason:[(imapd) Failed IMAP login from 62.9 ... show moreCluster member 192.168.0.30 (-) said, DENY 62.92.89.220, Reason:[(imapd) Failed IMAP login from 62.92.89.220 (NO/Norway/220.89.92.62.static.cust.telenor.com): 1 in the last 3600 secs] show less	Brute-Force
Hirte	04 Mar 2021	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
hosterpack.com	04 Mar 2021	(imapd) Failed IMAP login from 62.92.89.220 (NO/Norway/220.89.92.62.static.cust.telenor.com): 1 in t ... show more(imapd) Failed IMAP login from 62.92.89.220 (NO/Norway/220.89.92.62.static.cust.telenor.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Mar 5 02:03:12 ir1 dovecot[9799]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=<[email protected]>, method=PLAIN, rip=62.92.89.220, lip=158.58.191.107, session=<u80Qjb28gls+XFnc> show less	Port Scan
xyz.rip	01 Mar 2021	Magento Bruteforce Admin...	Brute-Force Web App Attack
Hirte	01 Mar 2021	C1,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
Hirte	28 Feb 2021	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	Web Spam Bad Web Bot Web App Attack
TST	27 Feb 2021	hacker backend sniffing: /index.php/admin/	Hacking Web App Attack