JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.230.78.197

213.230.78.197 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 69%: ?

69%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Hostname(s)	197.64.uzpak.uz
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.230.78.197

Whois 213.230.78.197

IP Abuse Reports for 213.230.78.197:

This IP address has been reported a total of 51 times from 34 distinct sources. 213.230.78.197 was first reported on October 14th 2022, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 saamkuu	2026-09-18 05:49:13 (14 hours ago)	DDoS botnet: TCP connection flood, 54 connections to port 443.	DDoS Attack
🇩🇪 Vegascosmetics	2026-09-15 19:40:59 (3 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 68>=65, Abuse 67, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇺🇸 gui-ying233	2026-09-13 08:32:52 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 04:40:29 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_edition%3A505&f%5B1%5D=digest_key_terms%3A338&f%5B2%5D=digest_key_terms%3A360&f%5B3%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B495%5D=495 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
Anonymous	2026-09-05 04:30:16 (1 week ago)	Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (4M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group \| Blocked by User-Agent Filter: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| UA: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Mobile Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
Anonymous	2026-09-01 21:39:04 (2 weeks ago)	MikroTik Enterprise Honeypot	Port Scan
🇺🇸 gui-ying233	2026-09-01 06:24:43 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 RAP	2026-08-30 00:55:52 (2 weeks ago)	2026-08-30 00:55:52 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 TPI-Abuse	2026-08-28 10:00:12 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 213.230.78.197 (197.64.uzpak.uz): 1 in the last ... show more (mod_security) mod_security (id:210730) triggered by 213.230.78.197 (197.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:00:06.465745 2026] [security2:error] [pid 18128:tid 18128] [client 213.230.78.197:1244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|john-bell-associates.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "john-bell-associates.com"] [uri "/reddit.com"] [unique_id "apFcJvY73URkg3YIQVtz-AAAAAI"], referer: https://john-bell-associates.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-27 05:05:25 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-27 03:15:27 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇪🇸 el-brujo	2026-08-26 13:01:11 (3 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 kosada.com	2026-08-26 00:25:53 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-25 00:19:59 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-24 12:03:14 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.24.85.3

🇧🇷 201.77.124.248

🇵🇾 177.11.254.198

🇫🇷 176.139.29.220

🇧🇴 166.114.161.126

🇧🇩 151.158.44.55

🇸🇬 101.32.240.31

🇦🇺 45.67.96.67

🇺🇸 20.98.132.247

🇷🇴 2.57.122.238

🇵🇪 179.7.106.166

🇧🇷 177.75.55.145

🇺🇸 172.217.106.210

🇩🇪 154.194.114.112

🇨🇳 125.124.226.217

🇬🇧 104.218.164.117

🇬🇷 83.235.21.125

🇪🇸 46.253.45.10

🇨🇱 45.181.122.221

🇬🇧 35.203.211.66