JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

94.158.58.77

Recent Activity

Abuse confidence score ?

85% Critical

50 reports

37 reporters · latest 6 hours ago

ISP	IPLUS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43060
Domain Name	comnet.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 94.158.58.77

Export CSV

This IP address has been reported a total of 50 times from 37 distinct sources. 94.158.58.77 was first reported on March 22nd 2025, and the most recent report was 6 hours ago. In the last 60 days, the top reporter locations were: United States of America with 8 reports; Germany with 5 reports; France with 2 reports. The most common categories in these recent reports were: Port Scan 15 times; Hacking 8 times; Brute-Force 8 times; Bad Web Bot 4 times; IoT Targeted 3 times; Other 6 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 abdullahmughal	2026-10-12 02:01:14 (6 hours ago)	Jaal Honeypot: Unauthorized malicious activity observed. • Targets: SSH:22, Telnet:23 (3 sessions be ... show more Jaal Honeypot: Unauthorized malicious activity observed. • Targets: SSH:22, Telnet:23 (3 sessions between 2026-10-11 01:33 UTC and 2026-10-11 01:34 UTC) • Activity: • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Brute-Force SSH IoT Targeted
🇩🇪 Packets-Decreaser.NET	2026-10-11 23:24:38 (9 hours ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇦🇹 hxsain	2026-10-11 11:52:27 (21 hours ago)	Blocked by UFW on fr2 [23/tcp] \| SPT: 49608 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.co ... show more Blocked by UFW on fr2 [23/tcp] \| SPT: 49608 \| TTL: 48 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇩🇪 london2038.com	2026-10-10 23:47:37 (1 day ago)	Connection atttempts against closed TCP ports Oct 11 01:46:17 BLOCK SRC=94.158.58.77 LEN=60 TOS=0x00 ... show more Connection atttempts against closed TCP ports Oct 11 01:46:17 BLOCK SRC=94.158.58.77 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=31967 DF PROTO=TCP SPT=5541 DPT=22 WINDOW=65535 RES=0x00 SYN Oct 11 01:46:17 BLOCK SRC=94.158.58.77 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=9048 DF PROTO=TCP SPT=23088 DPT=23 WINDOW=65535 RES=0x00 SYN Oct 11 01:47:36 BLOCK SRC=94.158.58.77 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=6582 DF PROTO=TCP SPT=19757 DPT=22 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇧🇷 NOCVIU	2026-10-10 14:00:10 (1 day ago)	Honeypot/Firewall detectou varredura não solicitada ou brute-force Inbound nas portas: 22, 23. Total ... show more Honeypot/Firewall detectou varredura não solicitada ou brute-force Inbound nas portas: 22, 23. Total de conexões droppadas: 8. show less	Port Scan Brute-Force
🇵🇱 ToJa	2026-10-08 07:02:29 (4 days ago)	SSH (tcp/22) Honeypot Trap: Oct 8 09:02:25 server1 sshd-session[199012]: Connection closed by 94.15 ... show more SSH (tcp/22) Honeypot Trap: Oct 8 09:02:25 server1 sshd-session[199012]: Connection closed by 94.158.58.77 port 50798 show less	Port Scan SSH
🇪🇪 Tsumugi Kotobuki	2026-10-08 06:37:44 (4 days ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 50 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 50 \| Len: 60B \| Win: 65535(1) \| F2B/ufw-honeypot@2026-10-08T06:37:44Z show less	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-10-08 03:02:04 (4 days ago)	Port Scan Attack proto:TCP src:43300 dst:23	Port Scan
🇷🇸 Scan	2026-10-08 02:33:01 (4 days ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-10-08 01:09:35 (4 days ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 jbettigole	2026-10-07 06:15:30 (5 days ago)	MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/F ... show more MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist show less	Brute-Force Hacking
🇺🇸 uhhhhhhyeahnotanythingthatislikemyotheraccountsanywhereelse	2026-10-06 18:17:09 (5 days ago)	6 login or exploit attempts on Telnet/23, SSH/22, 2026-10-06 17:45-17:48 UTC	Brute-Force SSH IoT Targeted
🇷🇸 Scan	2026-09-28 08:14:42 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-09-27 04:15:56 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 94.158.58.77 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 94.158.58.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 00:15:52.659810 2026] [security2:error] [pid 20919:tid 20919] [client 94.158.58.77:27579] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|starsnurses.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "starsnurses.com"] [uri "/"] [unique_id "ariYeErS0lxeYsJgxbPtFgAAAAQ"], referer: https://bulkdrchecker.shop/dir/seo-backlink-services-197501 show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2026-09-25 11:45:17 (2 weeks ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇰 220.247.224.226

🇪🇨 186.68.83.105

🇺🇸 147.185.132.135

🇨🇳 113.221.47.130

🇭🇷 86.33.88.34

🇳🇱 45.148.10.152

🇹🇼 198.235.24.42

🇩🇪 194.88.98.122

🇺🇸 147.185.132.134

🇺🇸 147.185.132.13

🇮🇳 123.253.162.253

🇺🇸 70.183.226.29

🇺🇸 35.212.48.254

🇨🇦 35.203.92.125

🇸🇬 34.158.63.109

🇺🇸 13.222.148.139

🇩🇪 2a02:c202:2360:1673::1

🇧🇪 185.132.187.72

🇨🇳 180.100.217.164

🇧🇴 166.114.133.183