JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 92.63.205.161

92.63.205.161 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 36%: ?

36%

ISP	UZMOBILE branch of Uzbektelecom JSC
Usage Type	Mobile ISP
ASN	AS201767
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 92.63.205.161

Whois 92.63.205.161

IP Abuse Reports for 92.63.205.161:

This IP address has been reported a total of 49 times from 36 distinct sources. 92.63.205.161 was first reported on October 6th 2022, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 soverin	2026-07-02 04:15:42 (17 hours ago)	spam	Email Spam
🇮🇩 Konaa	2026-07-01 09:04:18 (1 day ago)	Jul 01 15:50:08 rapi wings[1730548]: 2026/07/01 15:50:08 http: TLS handshake error from 92.63.205.16 ... show more Jul 01 15:50:08 rapi wings[1730548]: 2026/07/01 15:50:08 http: TLS handshake error from 92.63.205.161:9813: tls: first record does not look like a TLS handshake Jul 01 15:50:19 rapi wings[1730548]: 2026/07/01 15:50:19 http: TLS handshake error from 92.63.205.161:27653: tls: first record does not look like a TLS handshake Jul 01 15:50:42 rapi wings[1730548]: 2026/07/01 15:50:42 http: TLS handshake error from 92.63.205.161:9814: tls: first record does not look like a TLS handshake Jul 01 15:50:46 rapi wings[1730548]: 2026/07/01 15:50:46 http: TLS handshake error from 92.63.205.161:9815: tls: first record does not look like a TLS handshake Jul 01 15:50:56 rapi wings[1730548]: 2026/07/01 15:50:56 http: TLS handshake error from 92.63.205.161:28153: tls: first record does not look like a TLS handshake show less	Email Spam Port Scan Brute-Force
🇺🇸 kosada.com	2026-06-25 19:49:20 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇦🇺 SecureLinkSolutions	2026-06-18 04:32:10 (2 weeks ago)	Sending phising emails with malicious attachement	Phishing Hacking
🇮🇩 hermawan	2026-06-16 05:34:22 (2 weeks ago)	1781588054.076731 92.63.205.161 103.166.156.58 65535_2-4-1-1-1-3_1360_6 2026-06-16 12:34:14 WIB ...	Email Spam Hacking
🇳🇱 soverin	2026-06-05 15:37:35 (3 weeks ago)	spam	Email Spam
🇨🇭 Origon	2026-05-24 06:42:22 (1 month ago)	NOQUEUE - IP: 92.63.205.161 - May 24 08:42:22 plesk postfix/smtpd[3277177]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 92.63.205.161 - May 24 08:42:22 plesk postfix/smtpd[3277177]: NOQUEUE: reject: RCPT from unknown[92.63.205.161]: 554 5.7.1 Service unavailable; Client host [92.63.205.161] blocked using dnsbl-2.uceprotect.net; Net 92.63.205.0/24 is UCEPROTECT-Level2 listed because 31 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=92.63.205.161; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[92.63.205.161]> show less	Email Spam
🇮🇹 LTM	2026-05-15 06:20:02 (1 month ago)	Mail - Generic Spam	Email Spam Spoofing
🇺🇸 TPI-Abuse	2026-04-21 11:22:15 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 92.63.205.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 92.63.205.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 07:22:09.208349 2026] [security2:error] [pid 2480821:tid 2480835] [client 92.63.205.161:64678] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|digital4z.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digital4z.com"] [uri "/wp-content/plugins/jetpack/modules/custom-css/WS_FTP.LOG"] [unique_id "aedd4azTp_zJamoL2_YJfQAAAMY"], referer: https://digital4z.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-04-15 03:55:41 (2 months ago)	Fail2Ban: 92.63.205.161 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 92.63.205.161 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-06 16:55:19 (2 months ago)	(mod_security) mod_security (id:211030) triggered by 92.63.205.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211030) triggered by 92.63.205.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 12:55:15.982161 2026] [security2:error] [pid 308663:tid 308663] [client 92.63.205.161:44972] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack\|\|westernmassaa.net\|F\|2"] [data "Matched Data: ('~'\|\|( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "westernmassaa.net"] [uri "/meetings/"] [unique_id "adPlc1CxiQKxM9qaKBfh7AAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-03-24 08:52:09 (3 months ago)	Email account brute force: 2 attempts were recorded from 92.63.205.161 2026-03-24T08:26:33+01:00 war ... show more Email account brute force: 2 attempts were recorded from 92.63.205.161 2026-03-24T08:26:33+01:00 warning: unknown[92.63.205.161]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-24T08:26:34+01:00 warning: unknown[92.63.205.161]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2026-03-24 07:19:47 (3 months ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇨🇿 lp	2026-03-23 23:51:37 (3 months ago)	Email account brute force: 4 attempts were recorded from 92.63.205.161 2026-03-23T23:58:36+01:00 war ... show more Email account brute force: 4 attempts were recorded from 92.63.205.161 2026-03-23T23:58:36+01:00 warning: unknown[92.63.205.161]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-23T23:58:37+01:00 warning: unknown[92.63.205.161]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-03-23T23:58:37+01:00 warning: unknown[92.63.205.161]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-03-23T23:58:37+01:00 warning: unknown[92.63.205.161]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇫🇷 ingroscart.it	2026-03-23 23:24:54 (3 months ago)	(smtpauth) Failed SMTP AUTH login from 92.63.205.161 (UZ/Uzbekistan/-)	Brute-Force

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 158.49.70.49

🇪🇸 108.181.121.61

🇮🇩 103.255.163.170

🇱🇹 81.30.98.44

🇬🇧 2.57.17.61

🇳🇱 2a00:1450:4013:c1a::129

🇺🇸 184.174.97.197

🇦🇷 181.1.194.227

🇸🇬 43.173.178.159

🇰🇷 211.216.58.204

🇳🇱 178.16.54.22

🇰🇷 175.198.175.22

🇺🇸 162.243.0.195

🇺🇸 152.32.233.27

🇻🇳 116.109.38.246

🇫🇷 91.231.89.174

🇺🇸 50.62.22.47

🇳🇱 2a00:1450:4013:c03::12e

🇳🇱 193.176.31.215

🇦🇷 168.121.33.131