JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

84.54.73.112

Recent Activity

Abuse Confidence Score

68% Elevated

35 reports

25 reporters · latest 3 hours ago

ISP: Uzbektelekom Joint Stock Company
Usage Type: Fixed Line ISP
ASN: AS8193
Domain Name: bkm.uz
Country: 🇺🇿 Uzbekistan
City: Tashkent, Tashkent

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

35 from 25 distinct reporters

First reported

October 17th 2023

Most recent report

3 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 6 🇨🇿 Czechia 2

Most common categories Port Scan 10 Brute-Force 8 Web App Attack 7 Hacking 6 Bad Web Bot 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-11-06 23:45:00 UTC · (3 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇮 dnsbd.tech	2026-11-06 18:02:02 UTC · (9 hours ago)	nftables: Port scan (TCP:23) [srv2]	Port Scan Hacking
Anonymous	2026-11-06 13:10:11 UTC · (14 hours ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
Anonymous	2026-11-06 04:54:12 UTC · (22 hours ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇺🇸 TPI-Abuse	2026-11-01 03:06:44 UTC · (6 days ago)	(mod_security) mod_security (id:225170) triggered by 84.54.73.112 (112.73.intal.uz): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 23:06:36.794006 2026] [security2:error] [pid 3069:tid 3069] [client 84.54.73.11 ... show more (mod_security) mod_security (id:225170) triggered by 84.54.73.112 (112.73.intal.uz): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 23:06:36.794006 2026] [security2:error] [pid 3069:tid 3069] [client 84.54.73.112:13298] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|bfpsamoa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bfpsamoa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auasvOegmfunGmbBFKI_bAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-10-31 23:02:50 UTC · (6 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 84.54.73.112 2026-10-31T23:46:10+0100 vpn Access-Reject station: 84.54.73.112	Brute-Force Web App Attack
🇨🇿 lp	2026-10-31 17:33:22 UTC · (6 days ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 84.54.73.112 2026-10-31T18:19:53+0100 vpn Access-Reject station: 84.54.73.112	Brute-Force Web App Attack
🇬🇷 setupgr	2026-10-23 21:01:20 UTC · (2 weeks ago)	(wplogin_block) Blocked WP-Login Access Attempt 84.54.73.112 (UZ/Uzbekistan/Samarqand Region/Samarkand/-/[AS8193 Uzbektelekom Joint Stock Company]): 1 in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 84.54.73.112 - ... show more (wplogin_block) Blocked WP-Login Access Attempt 84.54.73.112 (UZ/Uzbekistan/Samarqand Region/Samarkand/-/[AS8193 Uzbektelekom Joint Stock Company]): 1 in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 84.54.73.112 - - [24/Oct/2026:00:01:11 +0300] "POST /wp-login.php HTTP/2.0" 503 7449 "https://babis.photo/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" show less	Port Scan
🇩🇪 Phenix Info	2026-10-16 13:15:27 UTC · (3 weeks ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇺🇸 xmission.com	2026-10-15 10:59:32 UTC · (3 weeks ago)	Blocked by UFW (TCP on 23) Source port: 31067 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 84.54.73.112) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Hacking Brute-Force
Anonymous	2026-10-15 07:33:12 UTC · (3 weeks ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-10-15 00:41:08 UTC · (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 84.54.73.112 (112.73.intal.uz): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:41:05.616759 2026] [security2:error] [pid 23933:tid 23933] [client 84.54.73. ... show more (mod_security) mod_security (id:225170) triggered by 84.54.73.112 (112.73.intal.uz): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:41:05.616759 2026] [security2:error] [pid 23933:tid 23933] [client 84.54.73.112:50006] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hayrun.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hayrun.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atAhIYk7qE863mQ7uVMmQwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-10-14 23:39:03 UTC · (3 weeks ago)	dlcarterauthor.com:443 84.54.73.112 - - [15/Oct/2026:10:39:01 +1100] "GET /wp/wp-json/wp/v2/users?per_page=100&_fields=slug HTTP/1.1" 404 66242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Saf ... show more dlcarterauthor.com:443 84.54.73.112 - - [15/Oct/2026:10:39:01 +1100] "GET /wp/wp-json/wp/v2/users?per_page=100&_fields=slug HTTP/1.1" 404 66242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 cybsecaoccol	2026-10-14 15:07:02 UTC · (3 weeks ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
Anonymous	2026-10-13 07:32:24 UTC · (3 weeks ago)	spam	Email Spam

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.69

🇻🇪 190.203.241.49

🇩🇪 102.220.163.249

🇺🇸 91.230.168.104

🇩🇪 5.146.218.110

🇺🇸 2a03:2880:f806:29::

🇺🇸 199.165.159.193

🇳🇱 195.178.110.134

🇺🇸 172.174.5.146

🇨🇳 121.227.31.13

🇨🇳 106.227.75.197

🇺🇸 50.6.193.84

🇩🇪 8.209.106.188

🇺🇸 216.25.89.150

🇧🇷 187.19.231.167

🇺🇸 173.79.110.32

🇺🇸 172.171.244.144

🇮🇩 163.52.135.227

🇳🇱 160.119.71.71

🇺🇸 97.219.50.243