JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.158.60.166

94.158.60.166 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 60%: ?

60%

ISP	IPLUS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43060
Hostname(s)	166.nat-2.comnet.uz
Domain Name	comnet.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.158.60.166

Whois 94.158.60.166

IP Abuse Reports for 94.158.60.166:

This IP address has been reported a total of 35 times from 23 distinct sources. 94.158.60.166 was first reported on August 6th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-08-25 02:57:10 (3 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-25 02:25:29 (3 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 65>=65, Abuse 60, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇫🇷 Sklurk	2026-08-21 08:39:21 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 gui-ying233	2026-08-20 14:21:20 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:11:43 (1 week ago)	UDP flood (DDoS) vs AS215599: 153 pkts / 0.22 MB to UDP 80/8443 across 118 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 153 pkts / 0.22 MB to UDP 80/8443 across 118 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇬🇧 Nov	2026-08-18 16:35:04 (1 week ago)	Unauthorized access attempt (udp/7777)	Port Scan
🇫🇷 Tilellit.PRO	2026-08-17 03:06:09 (1 week ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
Anonymous	2026-08-16 06:12:24 (1 week ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇳🇱 ByeByte API	2026-08-16 03:37:49 (1 week ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 23. Activity window: 2026 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 23. Activity window: 2026-08-16 03:35 UTC to 2026-08-16 03:37 UTC. show less	Port Scan
🇳🇱 ByeByte API	2026-08-16 03:37:49 (1 week ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 23. Activity window: 2026 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 23. Activity window: 2026-08-16 03:35 UTC to 2026-08-16 03:37 UTC. show less	Port Scan
🇳🇱 ByeByte API	2026-08-16 03:35:33 (1 week ago)	byebyte.space auth: TCP packet to port 23 (telnet) at 2026-08-16T03:35:32Z. Source port 44522. TCP f ... show more byebyte.space auth: TCP packet to port 23 (telnet) at 2026-08-16T03:35:32Z. Source port 44522. TCP flags: SYN. Packet: 60B, TTL 53, window 65535, IP id 17854. Single packet, dropped at firewall. p0f: OS Linux 2.2.x-3.x (generic match), 11 hops, uptime 3d6h, link DSL. show less	Port Scan
🇺🇸 kosada.com	2026-08-10 06:56:52 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-06 14:14:10 (3 weeks ago)	CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'T ... show more CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1763852400/cat_ids~299,158/tag_ids~606,578,635,219,585,725/request_format~json/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇩🇪 LRob	2026-08-03 12:15:13 (3 weeks ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1763766000/cat_ids~432,297/tag_ids~232,652,492,832,668,622,481,424,654/request_format~json/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇺🇸 kosada.com	2026-07-31 05:11:23 (4 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 217.179.7.82

🇺🇸 129.121.75.215

🇮🇳 122.166.154.21

🇫🇷 91.196.152.21

🇺🇸 52.27.146.57

🇺🇸 44.211.73.79

🇺🇸 40.77.167.21

🇺🇸 20.80.75.177

🇮🇱 176.228.28.28

🇺🇸 162.216.150.250

🇮🇳 123.253.162.254

🇸🇬 43.134.94.96

🇫🇷 2a01:7a7:2:418a:7ec2:55ff:fead:c860

🇧🇪 198.235.24.215

🇺🇸 172.245.157.165

🇺🇸 134.195.210.168

🇮🇳 103.216.145.2

🇨🇳 101.96.192.88

🇷🇴 92.118.39.14

🇩🇿 41.111.172.25