JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.55.120.70

92.55.120.70 was found in our database!

This IP was reported 79 times. Confidence of Abuse is 50%: ?

50%

ISP	Telekabel Bitola kabelski operator
Usage Type	Fixed Line ISP
ASN	AS41557
Domain Name	neotel.com.mk
Country	🇲🇰 North Macedonia
City	Ohrid, Ohrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.55.120.70

Whois 92.55.120.70

IP Abuse Reports for 92.55.120.70:

This IP address has been reported a total of 79 times from 36 distinct sources. 92.55.120.70 was first reported on May 27th 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-25 03:23:07 (18 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /wp-config.php.old \| 2026-08-25 03:23 UTC show less	Hacking Web App Attack
🇺🇸 stechusa	2026-08-23 13:18:37 (2 days ago)	[Askari] \| country=MK \| Behavior: Outdated browser, Targeting specific pages, HTTP/1.1 over TLS, Con ... show more [Askari] \| country=MK \| Behavior: Outdated browser, Targeting specific pages, HTTP/1.1 over TLS, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-08-23 13:18:37 (2 days ago)	ELEVATED_THREAT \| country=MK \| ASN=Drustvo za telekomunikaciski uslugi TELEKABEL DOOEL Stip \| AbuseI ... show more ELEVATED_THREAT \| country=MK \| ASN=Drustvo za telekomunikaciski uslugi TELEKABEL DOOEL Stip \| AbuseIPDB=44% \| 19 IPs targeting /brand.html \| Facet request during elevated threat (facet_ratio=0.64, unique_ips=157) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇺🇸 kosada.com	2026-08-23 07:10:38 (2 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 15:06:06 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-20 10:10:22 (5 days ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Web App Attack Hacking SQL Injection
🇫🇷 Zkillu	2026-08-19 21:57:55 (5 days ago)	UDP flood (DDoS) vs AS215599: 33625 pkts / 48.08 MB to UDP 80/8443 across 337 dst IP(s), 2026-08-19 ... show more UDP flood (DDoS) vs AS215599: 33625 pkts / 48.08 MB to UDP 80/8443 across 337 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:57:55 (5 days ago)	UDP flood (DDoS) vs AS215599: 33625 pkts / 48.08 MB to UDP 80/8443 across 337 dst IP(s), 2026-08-19 ... show more UDP flood (DDoS) vs AS215599: 33625 pkts / 48.08 MB to UDP 80/8443 across 337 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇨🇭 backslash	2026-08-13 04:48:04 (1 week ago)	block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB	Bad Web Bot
🇺🇸 kosada.com	2026-08-12 06:05:07 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-06 15:30:44 (2 weeks ago)	CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'T ... show more CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1763852400/cat_ids~828,673/tag_ids~552,629,542,614,226,574/request_format~json/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇩🇪 LRob	2026-08-05 01:01:38 (2 weeks ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1763852400/cat_ids~640,154,122/tag_ids~436,280,590,213,344,439/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-08-01 02:15:25 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 Magnytu2	2026-07-16 03:11:26 (1 month ago)	apw-Joomla User : try to access forms...	Hacking
🇦🇹 urnilxfgbez	2026-05-18 22:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇰 212.130.85.130

🇮🇳 116.74.77.163

🇻🇳 103.1.210.25

🇧🇷 201.63.223.138

🇭🇰 156.245.246.50

🇸🇪 146.70.52.196

🇳🇱 94.154.43.146

🇰🇿 93.95.241.150

🇺🇸 66.220.149.38

🇩🇪 207.154.222.214

🇷🇺 176.99.130.169

🇩🇪 172.71.247.129

🇺🇸 172.68.174.86

🇹🇼 122.116.238.67

🇪🇸 95.178.115.226

🇮🇱 84.228.192.199

🇹🇷 46.197.13.47

🇸🇳 41.83.161.21

🇳🇱 195.178.110.228

🇲🇽 187.195.144.223