92.53.116.137

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
65% Elevated
32 reports
22 reporters · latest 1 day ago
ISP
JSC TIMEWEB
Usage Type
Data Center/Web Hosting/Transit
ASN
AS9123
Hostname(s)
smtpout4.timeweb.ru
Domain Name
timeweb.com
Country
🇷🇺 Russian Federation
City
Saint Petersburg, St. Petersburg
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
32 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇧🇷 Brazil 2 🇩🇪 Germany 2
Most common categories Port Scan 7 Brute-Force 6 Hacking 4 Fraud VoIP 4 FTP Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-09 UTC.
Brute-Force
🇨🇭 Inaxas AG
Fraud VoIP
🇫🇷 uthul
T-Pot honeypot: 29 hits on ports [5060] (automated)
Port Scan Hacking
🇫🇷 uthul
T-Pot honeypot: 15 hits on ports [5060] (automated)
Port Scan Hacking
🇮🇹 Francesco Ippoliti
[Nov 9 11:13:32] NOTICE[361926] res_pjsip/pjsip_distributor.c: Request 'OPTIONS' from '<sip:1@1>' failed for '92.53.116.137:49449' (callid: 1) - No matching endpoint found ...
Brute-Force Port Scan
🇪🇸 raiolanetworks.com
Honeypot detection: SIP/VoIP fraud. 4 events observed. Reported automatically from a honeypot sensor.
Fraud VoIP Brute-Force
🇺🇸 ShadowWhisperer
SIP port scan / probe. OPTIONS probe ua=
Port Scan Fraud VoIP
🇧🇷 Host One
T-Pot Honeypot alert: 15 malicious events (sip_bruteforce) detected.
Brute-Force Web App Attack
🇫🇷 uthul
T-Pot honeypot: 14 hits on ports [5060] (automated)
Port Scan Hacking
🇩🇪 scolastico
[automated] IP failed to authenticate or send unauthenticated INVITE requests
Brute-Force Fraud VoIP
🇹🇷 pashait
Auto-blocked by Seczar SecureOps — DNS Flood / Tunneling Suspected (1084 events in 5min) at 2026-11-09 04:35
Hacking
🇮🇹 Francesco Ippoliti
Brute-Force Port Scan
🇩🇪 NxtGenIT
Sentrypeer Honeypot hit, SIP Method: OPTIONS, User Agent: NOT_FOUND
FTP Brute-Force
Anonymous
Port Scan
🇺🇸 xmission.com
Sourced 1 spam messages over 3x XMissions threshold. Highest score: 37.2. Latest msgid suffix: ...3a3296567d
Email Spam

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.111
🇬🇧 193.8.186.31
🇺🇸 172.121.90.141
🇺🇸 143.244.166.174
🇳🇱 109.160.32.163
🇬🇧 81.154.199.220
🇺🇸 73.255.149.21
🇳🇱 51.15.109.241
🇺🇸 172.252.119.57
🇺🇸 172.252.76.240
🇫🇷 169.40.142.93
🇧🇷 168.0.19.135
🇨🇴 152.204.188.178
🇨🇳 123.54.215.74
🇺🇸 109.105.209.72
🇷🇴 92.118.39.77
feedback