JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 84.54.71.139

84.54.71.139 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 81%: ?

81%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 84.54.71.139

Whois 84.54.71.139

IP Abuse Reports for 84.54.71.139:

This IP address has been reported a total of 151 times from 86 distinct sources. 84.54.71.139 was first reported on April 13th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-22 13:04:25 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 84.54.71.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 84.54.71.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 09:04:18.079227 2026] [security2:error] [pid 13632:tid 13654] [client 84.54.71.139:8983] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 84.54.71.139 (+1 hits since last alert)\|fastesttrademark.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fastesttrademark.com"] [uri "/xmlrpc.php"] [unique_id "ajky0qGChniXM4IxhGv3CAAAAIk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 12:35:37 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 84.54.71.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 84.54.71.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 08:35:32.725888 2026] [security2:error] [pid 445:tid 445] [client 84.54.71.139:32375] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 84.54.71.139 (+1 hits since last alert)\|riser-astrology.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "riser-astrology.com"] [uri "/xmlrpc.php"] [unique_id "ajksFOloGwZm8RrePN6NZQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-22 07:41:19 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇱🇻 garmtech.com	2026-06-22 06:58:45 (2 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇪🇸 alferez	2026-06-22 06:41:20 (2 days ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
🇳🇱 soverin	2026-06-22 05:57:06 (2 days ago)	spam	Email Spam
🇫🇷 MatStef132	2026-06-21 21:24:28 (2 days ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇵🇱 sefinek.net	2026-06-19 14:38:21 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from UZ. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from UZ. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇹🇷 Domainhizmetleri.com	2026-06-15 07:05:31 (1 week ago)	[honeypot] - FTP	FTP Brute-Force Port Scan
🇺🇸 Cyber Crusader	2026-06-10 00:24:02 (2 weeks ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇩🇪 Admins@FBN	2026-06-09 18:48:54 (2 weeks ago)	FW-PortScan: Traffic Blocked srcport=46799 dstport=14137	Port Scan
🇺🇸 bkolics	2026-06-09 08:32:13 (2 weeks ago)	2026-06-09T10:32:12.956011+02:00 mail postfix/smtpd[27121]: NOQUEUE: reject: RCPT from unknown[84.54 ... show more 2026-06-09T10:32:12.956011+02:00 mail postfix/smtpd[27121]: NOQUEUE: reject: RCPT from unknown[84.54.71.139]: 554 5.7.1 Service unavailable; Client host [84.54.71.139] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?84.54.71.139; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[0.0.0.0]> ... show less	Brute-Force
Anonymous	2026-06-05 18:47:17 (2 weeks ago)	2026-06-05T20:47:16.306944+02:00 gollum postfix/smtpd[2899043]: NOQUEUE: reject: RCPT from unknown[8 ... show more 2026-06-05T20:47:16.306944+02:00 gollum postfix/smtpd[2899043]: NOQUEUE: reject: RCPT from unknown[84.54.71.139]: 554 5.7.1 Service unavailable; Client host [84.54.71.139] blocked using zen.spamhaus.org; Listed by PBL, see https://check.spamhaus.org/query/ip/84.54.71.139 / Listed by XBL, see https://check.spamhaus.org/query/ip/84.54.71.139 / Listed by CSS, see https://check.spamhaus.org/query/ip/84.54.71.139; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[84.54.71.139]> ... show less	Email Spam
🇳🇱 soverin	2026-06-05 14:58:13 (2 weeks ago)	spam	Email Spam
🇳🇱 soverin	2026-06-04 08:12:04 (2 weeks ago)	spam	Email Spam

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇻 81.30.98.144

🇧🇷 205.210.31.237

🇳🇱 176.65.148.132

🇳🇱 176.65.148.2

🇩🇪 162.19.243.145

🇺🇸 107.175.46.39

🇭🇰 103.112.173.87

🇰🇷 59.21.37.60

🇺🇸 52.20.73.79

🇧🇪 34.140.157.205

🇳🇱 31.14.32.6

🇧🇷 191.53.132.12

🇺🇸 157.55.39.8

🇨🇳 117.176.228.84

🇮🇳 103.171.117.45

🇱🇻 83.99.206.233

🇮🇶 65.20.133.208

🇳🇱 45.148.10.151

🇺🇸 20.161.30.192

🇺🇸 107.150.103.88