JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 84.54.72.162

84.54.72.162 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 77%: ?

77%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Hostname(s)	162.72.albatros.uz
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 84.54.72.162

Whois 84.54.72.162

IP Abuse Reports for 84.54.72.162:

This IP address has been reported a total of 126 times from 75 distinct sources. 84.54.72.162 was first reported on August 24th 2023, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-09-18 04:38:32 (5 hours ago)	tcp/22 (4 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-09-16 18:05:20 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 84.54.72.162 (162.72.albatros.uz): 1 in the las ... show more (mod_security) mod_security (id:210350) triggered by 84.54.72.162 (162.72.albatros.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:05:13.783546 2026] [security2:error] [pid 187520:tid 187520] [client 84.54.72.162:62121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|hotelausland.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hotelausland.com"] [uri "/hotel-ausland-2"] [unique_id "aqraWSugsugsO31IEUijVAAAAAM"], referer: https://hotelausland.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇬🇪 ORDUNET	2026-09-15 10:34:19 (2 days ago)	Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:5555/udp in AS203136 (LLC Ordu ... show more Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:5555/udp in AS203136 (LLC Ordunet), Georgia, on 2026-09-15 from 14:17 local time (+04:00). This source sustained more than 800 packets/sec toward a single UDP port, against about 200 packets/sec for a legitimate player of that server. It was one of 8847 sources in 2396 networks and 160 countries recorded inside a single 25-minute window - the server's entire real audience is about a hundred players. Detected on a MikroTik RouterOS router in the raw/prerouting chain (dst-limit 800,200,src-address/10s); the timestamp is when this source crossed the threshold. Not a scan and not brute force - a packet flood, so the host is most likely compromised. Evidence: [email protected]. show less	DDoS Attack Exploited Host
🇺🇸 MPL	2026-09-14 12:40:11 (3 days ago)	tcp/23 (4 or more attempts)	Port Scan
🇩🇪 Vegascosmetics	2026-09-14 07:54:43 (4 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 67>=65, Abuse 65, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇪🇸 el-brujo	2026-09-13 03:22:31 (5 days ago)	DDoS Attack Layer 7	DDoS Attack
🇺🇸 kosada.com	2026-09-07 04:01:03 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A327&f%5B1%5D=digest_key_terms%3A388&f%5B2%5D=digest_key_terms%3A765&f%5B3%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B392%5D=392 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0") show less	DDoS Attack Bad Web Bot
🇩🇪 reznekcs	2026-09-05 05:03:05 (1 week ago)	Blocked by UFW firewall	Brute-Force
🇩🇰 powerhostingdk	2026-09-04 11:58:58 (1 week ago)	[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.	Email Spam Brute-Force
🇸🇰 EVISION	2026-09-03 09:12:28 (2 weeks ago)	Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporti ... show more Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: RILGGyqTtK8XLd8htbSYulcwnCmimpbg show less	Port Scan Hacking Brute-Force
🇺🇸 gui-ying233	2026-08-31 17:08:48 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇬🇧 pufferfishenjoyer	2026-08-30 14:31:13 (2 weeks ago)	IP caught from endlessh logs	Brute-Force SSH
🇪🇸 el-brujo	2026-08-29 00:13:07 (2 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 RAP	2026-08-27 17:40:16 (3 weeks ago)	2026-08-27 17:40:16 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇪🇸 el-brujo	2026-08-26 13:01:11 (3 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.142

🇳🇵 202.70.78.237

🇭🇰 150.5.154.160

🇺🇸 148.59.129.60

🇨🇳 125.124.72.167

🇮🇩 103.191.14.243

🇰🇷 210.90.191.70

🇵🇰 203.128.10.167

🇦🇷 190.195.14.195

🇦🇷 179.238.47.130

🇯🇴 176.29.18.241

🇧🇬 109.160.32.45

🇩🇪 108.165.164.23

🇮🇳 103.21.185.26

🇬🇧 89.37.172.142

🇨🇦 85.217.149.70

🇹🇼 61.220.179.158

🇧🇷 45.238.201.193

🇺🇸 45.112.249.166

🇧🇪 207.175.75.249