JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 84.54.70.109

84.54.70.109 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 62%: ?

62%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Hostname(s)	109.70.albatros.uz
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 84.54.70.109

Whois 84.54.70.109

IP Abuse Reports for 84.54.70.109:

This IP address has been reported a total of 97 times from 60 distinct sources. 84.54.70.109 was first reported on April 19th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 pltcldvlpr	2026-06-10 06:20:49 (1 day ago)	Bogus Useragent: 84.54.70.109 - - [10/Jun/2026:08:20:48 +0200] "GET /protocol?id=st_8_105&offset=400 ... show more Bogus Useragent: 84.54.70.109 - - [10/Jun/2026:08:20:48 +0200] "GET /protocol?id=st_8_105&offset=400&seq=468 HTTP/1.1" 444 0 "-" "Opera/9.69.(Windows NT 5.0; th-TH) Presto/2.9.171 Version/10.00" asn=8193 org="\x22Uzbektelekom\x22 Joint Stock Company" country=UZ ... show less	Bad Web Bot
🇳🇱 soverin	2026-06-08 17:25:08 (2 days ago)	spam	Email Spam
🇩🇪 Vegascosmetics	2026-06-07 15:36:27 (3 days ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Bad Web Bot
🇳🇱 soverin	2026-06-05 15:02:02 (5 days ago)	spam	Email Spam
🇬🇧 PeravixGroup	2026-06-01 11:58:34 (1 week ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇳🇱 knock	2026-05-30 12:13:08 (1 week ago)	Knock-Knock honeypot brute-force: Telnet (3 total hits)	Brute-Force
Anonymous	2026-05-21 08:23:24 (3 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇭🇺 Lacika555	2026-05-20 06:22:31 (3 weeks ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
Anonymous	2026-05-20 03:45:26 (3 weeks ago)	Killer parameter blocked (Magento Site) (Botnet activity attributed to: Angara Technologies Group / ... show more Killer parameter blocked (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322) show less	Web App Attack
🇺🇸 DiodeDave	2026-05-19 07:14:42 (3 weeks ago)	Attempted access after blacklisting	Email Spam
🇺🇸 MPL	2026-05-18 10:29:37 (3 weeks ago)	tcp/23 (4 or more attempts)	Port Scan
🇨🇭 Origon	2026-05-18 06:21:40 (3 weeks ago)	NOQUEUE - IP: 84.54.70.109 - May 18 08:21:40 plesk postfix/smtpd[1416693]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 84.54.70.109 - May 18 08:21:40 plesk postfix/smtpd[1416693]: NOQUEUE: reject: RCPT from unknown[84.54.70.109]: 554 5.7.1 Service unavailable; Client host [84.54.70.109] blocked using dnsbl-1.uceprotect.net; IP 84.54.70.109 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=84.54.70.109; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[213.230.92.37]> show less	Email Spam
🇬🇧 PeravixGroup	2026-05-12 16:24:51 (4 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 TPI-Abuse	2026-05-10 01:22:37 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 84.54.70.109 (109.70.albatros.uz): 1 in the las ... show more (mod_security) mod_security (id:210730) triggered by 84.54.70.109 (109.70.albatros.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 21:22:33.194684 2026] [security2:error] [pid 29969:tid 29969] [client 84.54.70.109:12137] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.ourodyssey.us\|F\|2"] [data ".blogspot.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ourodyssey.us"] [uri "/ourodyssey.blogspot.com"] [unique_id "af_d2YHcWqtxQZrnJvG8XQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pltcldvlpr	2026-05-09 14:22:56 (1 month ago)	Unidentified crawler ignoring robots.txt: 84.54.70.109 - - [09/May/2026:01:39:02 +0200] "GET /protoc ... show more Unidentified crawler ignoring robots.txt: 84.54.70.109 - - [09/May/2026:01:39:02 +0200] "GET /protocol?id=st_6_98&paragraph=14683224&seq=1067 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/3.0)" asn=8193 org="\x22Uzbektelekom\x22 Joint Stock Company" 84.54.70.109 - - [09/May/2026:16:22:55 +0200] "GET /protocol?id=st_6_97&paragraph=14681525&seq=1036 HTTP/1.1" 500 5 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/532.2 (KHTML, like Gecko) Chrome/57.0.897.0 Safari/532.2" asn=8193 org="\x22Uzbektelekom\x22 Joint Stock Company" ... show less	Bad Web Bot

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 194.62.107.243

🇮🇳 152.59.158.185

🇨🇳 115.46.88.68

🇮🇩 113.192.48.73

🇮🇳 106.211.53.147

🇺🇸 66.132.186.228

🇳🇱 45.148.10.151

🇫🇮 34.88.45.194

🇻🇳 14.226.7.104

🇺🇸 206.189.225.181

🇫🇷 194.163.185.115

🇧🇷 191.36.152.28

🇪🇨 186.68.83.104

🇨🇳 120.48.109.59

🇨🇳 111.26.62.39

🇺🇸 104.203.148.202

🇳🇵 103.167.229.249

🇨🇲 102.244.197.200

🇰🇪 102.211.146.125

🇺🇸 66.132.224.238