JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 84.32.71.54

84.32.71.54 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 5%: ?

ISP	UAB Nacionalinis Telekomunikaciju Tinklas
Usage Type	Data Center/Web Hosting/Transit
ASN	AS204770
Hostname(s)	ip-84-32-71-54.007.ptr.cherryservers.net
Domain Name	ntt.lt
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 84.32.71.54

Whois 84.32.71.54

IP Abuse Reports for 84.32.71.54:

This IP address has been reported a total of 17 times from 7 distinct sources. 84.32.71.54 was first reported on July 13th 2023, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-02 16:41:59 (6 hours ago)	Blocked by UFW (TCP on 3888) Source port: 40438 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 3888) Source port: 40438 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 84.32.71.54) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-22 21:54:59 (1 week ago)	Blocked by UFW (TCP on 3888) Source port: 47094 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 3888) Source port: 47094 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 84.32.71.54) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-18 21:38:19 (2 weeks ago)	Blocked by UFW (TCP on 3888) Source port: 50606 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 3888) Source port: 50606 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 84.32.71.54) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-14 19:14:39 (2 weeks ago)	Blocked by UFW (TCP on 3888) Source port: 54960 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 3888) Source port: 54960 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 84.32.71.54) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-23 05:57:39 (1 month ago)	Blocked by UFW (TCP on 3888) Source port: 37510 TTL: 50 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 3888) Source port: 37510 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 84.32.71.54) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-22 10:18:19 (1 month ago)	Blocked by UFW (TCP on 3888) Source port: 50150 TTL: 48 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 3888) Source port: 50150 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 84.32.71.54) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2024-03-30 03:25:26 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 29 23:25:19.060920 2024] [security2:error] [pid 13888] [client 84.32.71.54:49777] [client 84.32.71.54] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pigspolygon.xyz\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pigspolygon.xyz"] [uri "/old/mysql.sql"] [unique_id "ZgeGH_eByZ7rEuIBa2i-LAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-02-27 21:49:15 (2 years ago)	HEAD http://leralmedia.com/bak/leralmedia.com.zip statusCode: 503	Web Spam Hacking Bad Web Bot
🇪🇸 10dencehispahard SL	2024-02-22 11:00:09 (2 years ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇺🇸 TPI-Abuse	2024-02-18 13:57:49 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 18 08:57:41.738442 2024] [security2:error] [pid 1155] [client 84.32.71.54:4345] [client 84.32.71.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dudleyanddudley.com"] [uri "/restore/sftp-config.json"] [unique_id "ZdIM1Sr25GO9n5mYD1A_igAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇻🇳 Xuan Can	2024-02-17 23:39:09 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 84.32.71.54 (TR/Türkiye/-): 1 in the last 3600 ... show more (mod_security) mod_security (id:210492) triggered by 84.32.71.54 (TR/Türkiye/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 18 06:39:04.938617 2024] [security2:error] [pid 30352:tid 47568364828416] [client 84.32.71.54:1183] [client 84.32.71.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web30s.vn"] [uri "/sftp-config.json"] [unique_id "ZdFDmKZudjGpnwWxmxf6OgAAAUs"] show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-02-17 22:16:32 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 17 17:16:25.310417 2024] [security2:error] [pid 28794] [client 84.32.71.54:58927] [client 84.32.71.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oliverhardy.com"] [uri "/old/sftp-config.json"] [unique_id "ZdEwOX-w-4UWyfvbSINlJwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 hbrks	2024-02-17 12:02:08 (2 years ago)	HEAD http://epay.world/old/public_html.rar statusCode: 503	Web Spam Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2024-02-12 01:51:10 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 11 20:51:04.230351 2024] [security2:error] [pid 7486] [client 84.32.71.54:8063] [client 84.32.71.54] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|powderriverinc.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "powderriverinc.com"] [uri "/back/dump.sql"] [unique_id "Zcl5iGezSA5BnIfLHJb2tAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-02-04 19:04:27 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 84.32.71.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 04 14:04:24.963467 2024] [security2:error] [pid 5390] [client 84.32.71.54:22167] [client 84.32.71.54] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcoinsquaretrade.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinsquaretrade.com"] [uri "/mysql.sql"] [unique_id "Zb_fuCqdonZD2mh7SWSK1wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 152.228.196.30

🇸🇿 143.105.155.94

🇦🇱 141.98.141.57

🇫🇷 91.231.89.253

🇳🇱 45.148.10.141

🇬🇧 35.203.211.67

🇺🇸 20.118.216.221

🇹🇭 165.154.120.253

🇺🇸 147.185.132.56

🇨🇳 120.85.115.83

🇸🇬 101.47.27.73

🇸🇬 47.79.11.237

🇿🇦 41.173.43.34

🇸🇪 31.134.6.145

🇮🇪 18.201.248.91

🇺🇸 162.216.150.116

🇸🇬 114.119.154.89

🇵🇱 109.205.211.149

🇺🇸 57.141.6.55

🇧🇬 212.91.161.162