JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.230.78.25

213.230.78.25 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 77%: ?

77%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Hostname(s)	25.64.uzpak.uz
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.230.78.25

Whois 213.230.78.25

IP Abuse Reports for 213.230.78.25:

This IP address has been reported a total of 61 times from 41 distinct sources. 213.230.78.25 was first reported on March 8th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-09-18 14:38:00 (6 days ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 TPI-Abuse	2026-09-18 10:37:55 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 213.230.78.25 (25.64.uzpak.uz): 1 in the last 3 ... show more (mod_security) mod_security (id:210350) triggered by 213.230.78.25 (25.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 06:37:50.938012 2026] [security2:error] [pid 9275:tid 9275] [client 213.230.78.25:36215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|clowaterart.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "clowaterart.com"] [uri "/"] [unique_id "aq0UfqYD0n-gc1aV5V9-XwAAAA8"], referer: https://sitebacklinkchecker.space/dir/relevant-domain-backlinks-41672 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-18 08:22:45 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇨🇦 Slackin' Jack	2026-09-16 04:16:13 (1 week ago)	Triggered honeypot on port 23. (213.230.78.25)	Port Scan
🇹🇭 Sawasdee	2026-09-16 00:09:11 (1 week ago)	Port Scan ...	Port Scan
🇩🇪 Vegascosmetics	2026-09-15 14:37:38 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 70>=65, Abuse 71, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇭🇰 CyberFox	2026-09-14 20:27:11 (1 week ago)	19969/udp (1 or more attempts)	Port Scan
🇺🇸 gui-ying233	2026-09-11 18:25:54 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 ValtonTahiri	2026-09-11 15:25:02 (1 week ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=213.230.78.25; proto=TCP; source_port=13195; target_port=23; flags=SYN show less	Port Scan
🇺🇸 gui-ying233	2026-09-09 10:19:02 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 00:43:06 (2 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_edition%3A505&f%5B1%5D=digest_key_terms%3A315&f%5B2%5D=digest_key_terms%3A391&field_article_edition%5B504%5D=504&field_key_terms%5B328%5D=328 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-03 11:01:07 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇧🇷 somosbr	2026-08-30 12:56:05 (3 weeks ago)	[2026-08-30T12:56:05Z] Unsolicited scan from 213.230.78.25 to port 22/tcp	Port Scan
Anonymous	2026-08-23 03:01:24 (1 month ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇨🇭 backslash	2026-08-21 09:51:00 (1 month ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.243.212.17

🇧🇩 160.191.115.14

🇧🇩 103.174.193.110

🇳🇱 77.91.71.24

🇨🇳 8.136.211.31

🇷🇴 193.32.162.135

🇧🇴 190.181.25.210

🇧🇷 189.26.167.69

🇪🇸 188.209.113.253

🇺🇸 162.241.218.211

🇵🇰 118.107.139.87

🇨🇴 108.174.156.122

🇭🇰 103.210.21.178

🇬🇭 41.139.28.99

🇺🇸 184.105.139.70

🇺🇸 161.115.234.227

🇺🇸 104.207.47.210

🇺🇸 65.49.20.76

🇮🇩 163.7.6.41

🇯🇵 160.251.182.78