This IP address has been reported a total of
72
times from
43 distinct
sources.
213.230.78.160 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 17
reports;
France
with 5
reports;
Poland
with 4
reports.
The most common categories in these recent reports were:
Port Scan
25
times;
Bad Web Bot
12
times;
Brute-Force
9
times;
SSH
7
times;
DDoS Attack
6
times;
Other
10
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Port scan: unsolicited TCP connection (handshake completed) to a decoy port with no production servi ...
show morePort scan: unsolicited TCP connection (handshake completed) to a decoy port with no production service at 2026-10-14 19:08:28 UTC. Destination port probed: tcp/23 (Telnet). Source blocked. - Lumerux Defense (lumerux.com), automated report. Contact: [email protected]show less
nfdump top talker: 213.230.78.160 | first seen 2026-10-09 11:37:27.424 | duration 00:00:00.075 | flo ...
show morenfdump top talker: 213.230.78.160 | first seen 2026-10-09 11:37:27.424 | duration 00:00:00.075 | flows=1 | packets=23529 | bytes=17.8 M | pps=312 | bps=1.9 M | bpp=757 | proto=any
show less
nfdump top talker: 213.230.78.160 | first seen 2026-10-03 20:43:40.288 | duration 00:00:00.052 | flo ...
show morenfdump top talker: 213.230.78.160 | first seen 2026-10-03 20:43:40.288 | duration 00:00:00.052 | flows=1 | packets=21483 | bytes=21.0 M | pps=405 | bps=3.2 M | bpp=978 | proto=any
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
Bad Web Bot
Anonymous
2026-09-26T01:55:34.701434+02:00 vps kernel: [6751326.941656] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-09-26T01:55:34.701434+02:00 vps kernel: [6751326.941656] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=213.230.78.160 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=2597 DF PROTO=TCP SPT=32048 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
show less
Botnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:4444/udp in AS203136 (LLC Ordu ...
show moreBotnet UDP flood (DDoS) against a hosted game server at 185.143.177.x:4444/udp in AS203136 (LLC Ordunet), Georgia, on 2026-09-15 from 14:17 local time (+04:00). This source sustained more than 800 packets/sec toward a single UDP port, against about 200 packets/sec for a legitimate player of that server. It was one of 8847 sources in 2396 networks and 160 countries recorded inside a single 25-minute window - the server's entire real audience is about a hundred players. Detected on a MikroTik RouterOS router in the raw/prerouting chain (dst-limit 800,200,src-address/10s); the timestamp is when this source crossed the threshold. Not a scan and not brute force - a packet flood, so the host is most likely compromised. Evidence: [email protected].
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
show less
