JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

84.54.72.231

Activity Trending Down

Abuse Confidence Score

11% Caution

154 reports

78 reporters · latest 1 week ago

ISP: Uzbektelekom Joint Stock Company
Usage Type: Fixed Line ISP
ASN: AS8193
Hostname(s): 231.72.albatros.uz
Domain Name: bkm.uz
Country: 🇺🇿 Uzbekistan
City: Tashkent, Tashkent

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

154 from 78 distinct reporters

First reported

August 10th 2023

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 1 🇺🇸 United States of America 1

Most common categories Bad Web Bot 2 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-05 23:15:05 UTC · (1 week ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /brands/shopby/manufacturer-rcf-veeam-lsi-aruba_networks-haivision-xyz-ecler/product_vc_mcu-bez_mcu.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 鬼影233	2026-10-01 09:25:06 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36	Bad Web Bot
🇩🇪 Admins@FBN	2026-09-02 12:54:09 UTC · (2 months ago)	FW-PortScan: Traffic Blocked srcport=49043 dstport=23	Port Scan
🇺🇸 RAP	2026-09-01 06:13:09 UTC · (2 months ago)	2026-09-01 06:13:09 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 鬼影233	2026-08-24 07:16:08 UTC · (2 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 xmission.com	2026-08-18 13:42:04 UTC · (2 months ago)	Blocked by UFW (TCP on 22) Source port: 43161 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 84.54.72.231) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH Brute-Force
🇺🇸 MPL	2026-08-18 07:47:41 UTC · (2 months ago)	tcp/23 (2 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-08-18 04:15:17 UTC · (2 months ago)	FW-PortScan: Traffic Blocked srcport=51552 dstport=23	Port Scan
🇧🇷 noconex	2026-08-18 00:18:03 UTC · (2 months ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 84.54.72.231	Port Scan Brute-Force SSH
🇨🇭 4server	2026-08-16 18:37:36 UTC · (2 months ago)	[SunAug1620:37:29.5349362026][security2:error][pid4087238:tid4087275][client84.54.72.231:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.16 ... show more [SunAug1620:37:29.5349362026][security2:error][pid4087238:tid4087275][client84.54.72.231:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"25\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"prodotti.comarcosa.com\"][uri\"/collezioni/little-shop/page/2/\"][unique_id\"aoIDaeSgRAzbsFrN1fr0SQAAAJU\"] show less	Hacking Web App Attack
🇩🇪 HandyTreff.de	2026-08-14 09:12:02 UTC · (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.991 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa	Web App Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-07 22:06:05 UTC · (3 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇷🇺 genokrad	2026-08-06 06:17:02 UTC · (3 months ago)	Unauthorized connection try on TCP/23 (Telnet)	Port Scan
🇭🇰 鹏鹏	2026-07-30 10:09:09 UTC · (3 months ago)	monitor: on ser162528253480 \| port: 23 \| ttl: 43 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan IoT Targeted
🇺🇸 xmission.com	2026-07-29 07:41:02 UTC · (3 months ago)	Blocked by UFW (TCP on 23) Source port: 7065 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 84.54.72.231) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Hacking Brute-Force

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 142.147.223.174

🇳🇱 109.160.32.128

🇮🇩 202.46.144.22

🇳🇱 195.178.110.26

🇺🇸 172.104.30.66

🇺🇸 161.193.7.193

🇺🇸 142.147.223.101

🇲🇽 140.99.216.47

🇨🇦 136.0.35.90

🇸🇬 104.233.44.73

🇧🇬 79.124.40.162

🇺🇸 54.224.159.224

🇺🇸 50.6.192.84

🇺🇸 40.119.27.225

🇧🇪 35.210.22.77

🇧🇪 34.79.37.102

🇿🇦 20.164.213.82

🇷🇴 2.57.122.150

🇦🇷 190.104.33.138

🇧🇷 189.80.204.254