JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.79.190.248

202.79.190.248 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 22%: ?

22%

ISP	Turon Media XK
Usage Type	Fixed Line ISP
ASN	AS59668
Domain Name	turontelecom.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.79.190.248

Whois 202.79.190.248

IP Abuse Reports for 202.79.190.248:

This IP address has been reported a total of 6 times from 5 distinct sources. 202.79.190.248 was first reported on August 19th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-09 17:37:37 (6 days ago)	(mod_security) mod_security (id:210730) triggered by 202.79.190.248 (202.79.190.248.ip-trans.turonte ... show more (mod_security) mod_security (id:210730) triggered by 202.79.190.248 (202.79.190.248.ip-trans.turontelecom.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 13:37:17.089599 2026] [security2:error] [pid 26523:tid 26523] [client 202.79.190.248:32516] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|echinech.com\|F\|2"] [data ".local.php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "echinech.com"] [uri "/configuration.local.php.bak"] [unique_id "askmTalqyKulEbE9LPvPqAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-27 11:08:08 (2 weeks ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇺🇸 鬼影233	2026-08-29 15:07:53 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-20 14:53:16 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 21:05:10 (1 month ago)	UDP flood (DDoS) vs AS215599: 47 pkts / 0.07 MB to UDP 80/8443 across 44 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 47 pkts / 0.07 MB to UDP 80/8443 across 44 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:05:10 (1 month ago)	UDP flood (DDoS) vs AS215599: 47 pkts / 0.07 MB to UDP 80/8443 across 44 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 47 pkts / 0.07 MB to UDP 80/8443 across 44 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇿 154.244.45.131

🇺🇸 107.150.104.16

🇺🇸 98.231.246.126

🇻🇳 210.86.226.51

🇫🇮 147.185.133.115

🇺🇸 147.185.132.245

🇨🇳 117.62.22.127

🇸🇮 102.220.161.170

🇬🇧 77.67.26.129

🇬🇧 64.205.72.173

🇦🇷 45.238.220.116

🇰🇷 210.206.95.162

🇺🇸 209.209.59.230

🇲🇾 183.171.41.197

🇺🇸 147.185.132.212

🇺🇸 147.185.132.174

🇨🇳 115.190.126.68

🇬🇧 92.207.4.157

🇬🇧 91.90.121.225

🇳🇱 85.11.167.138