JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.158.60.92

94.158.60.92 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 68%: ?

68%

ISP	IPLUS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43060
Domain Name	comnet.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.158.60.92

Whois 94.158.60.92

IP Abuse Reports for 94.158.60.92:

This IP address has been reported a total of 56 times from 37 distinct sources. 94.158.60.92 was first reported on September 14th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 eagle	2026-10-13 06:45:54 (3 days ago)	94.158.60.92 - - [13/Oct/2026:06:45:53 +0000] "POST / HTTP/1.%1" 400 150 "-" "-" ...	Port Scan Web App Attack
🇷🇺 Darth Vader	2026-10-09 08:35:07 (1 week ago)	nfdump top talker: 94.158.60.92 \| first seen 2026-10-09 11:35:07.392 \| duration 00:00:00.051 \| flows ... show more nfdump top talker: 94.158.60.92 \| first seen 2026-10-09 11:35:07.392 \| duration 00:00:00.051 \| flows=1 \| packets=22506 \| bytes=17.6 M \| pps=439 \| bps=2.8 M \| bpp=782 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇷🇺 Darth Vader	2026-10-08 10:20:15 (1 week ago)	nfdump top talker: 94.158.60.92 \| first seen 2026-10-08 13:20:15.744 \| duration 00:00:00.083 \| flows ... show more nfdump top talker: 94.158.60.92 \| first seen 2026-10-08 13:20:15.744 \| duration 00:00:00.083 \| flows=2 \| packets=43989 \| bytes=32.3 M \| pps=528 \| bps=3.1 M \| bpp=733 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇩🇪 Vegascosmetics	2026-10-06 00:36:59 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 74>=65, Abuse 79, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇺🇸 RAP	2026-10-05 07:42:20 (1 week ago)	2026-10-05 07:42:20 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 TPI-Abuse	2026-10-04 08:13:24 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 94.158.60.92 (92.nat-2.comnet.uz): 1 in the las ... show more (mod_security) mod_security (id:210350) triggered by 94.158.60.92 (92.nat-2.comnet.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 04:13:20.072430 2026] [security2:error] [pid 15734:tid 15734] [client 94.158.60.92:30822] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|tttns.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tttns.com"] [uri "/"] [unique_id "asIKoPQ2h96WgH5-dGx77QAAAAs"], referer: https://linkexternal.store/dir/ethical-link-building-services-218992 show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 Darth Vader	2026-10-03 17:09:14 (1 week ago)	nfdump top talker: 94.158.60.92 \| first seen 2026-10-03 20:09:14.112 \| duration 00:00:00.066 \| flows ... show more nfdump top talker: 94.158.60.92 \| first seen 2026-10-03 20:09:14.112 \| duration 00:00:00.066 \| flows=12 \| packets=351912 \| bytes=344.3 M \| pps=5287 \| bps=41.4 M \| bpp=978 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇷🇸 Scan	2026-09-24 00:34:00 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 鬼影233	2026-09-23 11:29:18 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 16:38:34 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 MPL	2026-09-19 04:51:39 (3 weeks ago)	tcp/23 (2 or more attempts)	Port Scan
🇫🇷 security.rdmc.fr	2026-09-18 17:09:33 (4 weeks ago)	Port Scan Attack proto:TCP src:38983 dst:23	Port Scan
🇺🇸 RAP	2026-09-18 12:08:54 (4 weeks ago)	2026-09-18 12:08:54 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 kingjan1999	2026-09-17 12:09:20 (4 weeks ago)	Blocked by UFW [23/tcp] \| SPT: 26441 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefin ... show more Blocked by UFW [23/tcp] \| SPT: 26441 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇺🇸 xmission.com	2026-09-16 06:25:51 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 23684 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 23684 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 94.158.60.92) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 141.95.54.130

🇮🇳 20.244.12.108

🇧🇷 201.63.223.138

🇲🇦 196.92.7.249

🇷🇴 92.118.39.77

🇫🇷 91.231.89.238

🇩🇪 86.103.55.56

🇸🇬 85.137.51.161

🇺🇸 57.141.6.30

🇺🇸 20.127.185.37

🇲🇾 202.165.14.135

🇺🇸 128.90.106.7

🇰🇷 121.184.128.107

🇨🇳 116.179.37.178

🇺🇸 66.132.172.147

🇯🇵 43.153.169.186

🇹🇼 34.81.186.246

🇹🇼 123.193.130.49

🇰🇿 92.47.46.174

🇹🇷 85.100.149.191