JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 198.163.193.160

198.163.193.160 was found in our database!

This IP was reported 152 times. Confidence of Abuse is 100%: ?

100%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 198.163.193.160

Whois 198.163.193.160

IP Abuse Reports for 198.163.193.160:

This IP address has been reported a total of 152 times from 92 distinct sources. 198.163.193.160 was first reported on January 18th 2025, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇪 ORDUNET	2026-08-22 07:31:31 (10 hours ago)	Volumetric UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC ... show more Volumetric UDP flood (DDoS) against a hosted game server at 185.143.177.x:27004/udp in AS203136 (LLC Ordunet), Georgia. This source sustained more than 150 packets/sec toward a single destination UDP port and was one of ~250 sources in a distributed flood that peaked at 410,000 pps / 1.7 Gbit/s. Detected on a MikroTik RouterOS border router by per-source rate accounting (raw prerouting chain, dst-limit 150,50,src-address/10s); the timestamp is the moment this source crossed the threshold, timezone +04:00. This is not a port scan and not a brute-force attempt - it is a pure packet flood, so the host is most likely compromised and part of a botnet. Full packet-level evidence available on request to [email protected]. show less	DDoS Attack Exploited Host
🇺🇸 xmission.com	2026-08-21 20:39:06 (21 hours ago)	Blocked by UFW (TCP on 22) Source port: 31466 TTL: 40 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 31466 TTL: 40 Packet length: 60 TOS: 0x08 This report (for 198.163.193.160) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
🇺🇸 gui-ying233	2026-08-20 14:12:40 (2 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-20 10:36:26 (2 days ago)	Blocked by ModSec and CSF	Port Scan
🇧🇷 noconex	2026-08-20 06:32:17 (2 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 198.163.19 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 198.163.193.160 show less	Port Scan Brute-Force SSH
🇩🇰 powerhostingdk	2026-08-20 03:56:26 (2 days ago)	[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.	Email Spam Brute-Force
🇫🇷 EvoX	2026-08-17 13:53:18 (5 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized connection attempt detected on 22/SSH	SSH Port Scan
🇩🇪 guldkage	2026-08-16 04:13:59 (6 days ago)	Unauthorized connection attempt detected from IP address 198.163.193.160 to port 23 (ger-03) [C]	Brute-Force Exploited Host
🇩🇪 Vegascosmetics	2026-08-15 21:38:47 (6 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
Anonymous	2026-08-15 09:03:07 (1 week ago)	Blocked by firewall on hugin [22/tcp] \| Rule: UFW \| SPT: 12413 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Rep ... show more Blocked by firewall on hugin [22/tcp] \| Rule: UFW \| SPT: 12413 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH
🇮🇩 sockominfo	2026-08-14 14:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 198.163.193.160. Threat Score: 6.2/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 198.163.193.160. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-14 13:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 198.163.193.160. Threat Score: 6.4/10 (MEDIUM). Confidence ... show more Zimbra: Login failures from malicious IP: 198.163.193.160. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-14 12:00:10 (1 week ago)	Zimbra: Login failures from malicious IP: 198.163.193.160. Threat Score: 6/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 198.163.193.160. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 MPL	2026-08-13 04:33:59 (1 week ago)	tcp/23	Port Scan
🇺🇸 kosada.com	2026-08-12 23:03:39 (1 week ago)	Web bot: DDoS	DDoS Attack Bad Web Bot

Showing 1 to 15 of 152 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 208.68.39.214

🇳🇱 195.178.110.30

🇳🇱 193.47.62.69

🇩🇪 178.27.90.142

🇺🇸 68.116.95.217

🇸🇬 34.124.212.153

🇰🇷 221.168.33.178

🇺🇸 195.184.76.101

🇳🇱 195.178.110.218

🇧🇷 179.181.241.153

🇺🇸 174.73.128.140

🇻🇳 171.243.151.130

🇺🇸 138.197.37.115

🇳🇱 91.92.42.222

🇺🇸 45.156.129.115

🇬🇧 35.203.210.9

🇨🇳 27.188.163.170

🇷🇴 2.57.122.238

🇺🇸 2600:1f1c:a8f:a800:deb3:8ca7:2a22:41cf

🇰🇷 220.90.220.204