JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

213.230.78.4

Recent Activity

Abuse Confidence Score

67% Elevated

70 reports

43 reporters · latest 3 days ago

ISP: Uzbektelekom Joint Stock Company
Usage Type: Fixed Line ISP
ASN: AS8193
Hostname(s): 4.64.uzpak.uz
Domain Name: bkm.uz
Country: 🇺🇿 Uzbekistan
City: Tashkent, Tashkent

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

70 from 43 distinct reporters

First reported

June 16th 2023

Most recent report

3 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 16 🇩🇪 Germany 2 🇮🇹 Italy 2

Most common categories Bad Web Bot 17 Web App Attack 10 Port Scan 7 Hacking 6 Exploited Host 4

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 justbible	2026-11-08 18:40:01 UTC · (3 days ago)	HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 11 requests from 2026-11-08T18:40:01+00:00 to 2026-11-11T03:25:49+00:00, e.g. 'GET /en/kjv,darby,esv/1kgs/1 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x6 ... show more HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 11 requests from 2026-11-08T18:40:01+00:00 to 2026-11-11T03:25:49+00:00, e.g. 'GET /en/kjv,darby,esv/1kgs/1 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested). show less	Bad Web Bot
🇮🇹 A000Z	2026-11-08 01:46:27 UTC · (3 days ago)	Fail2Ban: 213.230.78.4 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:144.0) Gecko/20100101 Firefox/144.0	Bad Web Bot
Anonymous	2026-11-06 11:15:03 UTC · (5 days ago)	Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ... show more Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Attack Signature Blocked: /wishlist/index/add/product/474/form_key/p3vlgdQYmAskM48p/ \| UA: Mozilla/5.0 (Windows; U; Windows 95) AppleWebKit/532.48.2 (KHTML, like Gecko) Version/4.0.2 Safari/532.48.2 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-11-06 02:32:37 UTC · (5 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.	Bad Web Bot Web App Attack
🇲🇹 Malta	2026-11-05 23:25:50 UTC · (5 days ago)	213.230.78.4 - - [06/Nov/2026:00:25:50 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:148.0) Gecko/20100101 Firefox/148.0" Brute-force password attempt	Hacking Web App Attack Brute-Force
🇮🇹 CoreTech srl	2026-11-05 17:53:56 UTC · (6 days ago)	cloudlinux2 fail2ban: 2026-11-05 18:49:11,562 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 45.132.227.165 - 2026-11-05 18:49:10cloudlinux2 fail2ban: 2026-11-05 18:49:19,442 fail2ban.filter [1800]: INFO [plesk-wordpress] ... show more cloudlinux2 fail2ban: 2026-11-05 18:49:11,562 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 45.132.227.165 - 2026-11-05 18:49:10cloudlinux2 fail2ban: 2026-11-05 18:49:19,442 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 193.56.116.23 - 2026-11-05 18:49:19cloudlinux2 fail2ban: 2026-11-05 18:49:11,437 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 45.132.227.18 - 2026-11-05 18:49:10cloudlinux2 fail2ban: 2026-11-05 18:49:31,843 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 213.230.78.4 - 2026-11-05 18:49:30cloudlinux2 fail2ban: 2026-11-05 18:50:09,568 fail2ban.filter [1800]: INFO [plesk-modsecurity] Found 34.38.105.9 - 2026-11-05 18:50:09cloudlinux2 fail2ban: 2026-11-05 18:50:09,504 fail2ban.filter [1800]: INFO [plesk-modsecurity] Found 34.38.105.9 - 2026-11-05 18:50:09cloudlinux2 fail2ban: 2026-11-05 18:50:09,522 fail2ban.filter [1800]: INFO [plesk-modsecurity] Found 34.38.105.9 - 2026-11-05 18:50:09cloudlinu show less	Web App Attack
🇨🇳 Arisu Tendou	2026-10-31 14:04:16 UTC · (1 week ago)	UDP/80 flood attack	DDoS Attack Exploited Host
🇺🇸 RAP	2026-10-25 07:10:53 UTC · (2 weeks ago)	2026-10-25 07:10:53 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 TPI-Abuse	2026-10-23 09:05:23 UTC · (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 213.230.78.4 (4.64.uzpak.uz): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 05:05:17.098151 2026] [security2:error] [pid 26626:tid 26626] [client 213.230.78. ... show more (mod_security) mod_security (id:210350) triggered by 213.230.78.4 (4.64.uzpak.uz): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 05:05:17.098151 2026] [security2:error] [pid 26626:tid 26626] [client 213.230.78.4:38047] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|marveldirectory.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "marveldirectory.com"] [uri "/"] [unique_id "atsjTR6Z7uyx18AtQII8fgAAAAE"], referer: https://graphicnovelties.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-10-21 05:32:31 UTC · (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0	Bad Web Bot
🇫🇷 LRob	2026-10-19 21:36:56 UTC · (3 weeks ago)	Not following 301 redirects — wasted requests \| method: POST \| path: /wp-login.php \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36	Bad Web Bot
🇬🇧 spamverify.com	2026-10-19 01:39:46 UTC · (3 weeks ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇷🇴 abuse_IP_reporter	2026-10-13 06:45:10 UTC · (4 weeks ago)	Oct 13 09:10:32 server UFW BLOCK SRC=213.230.78.4 DF PROTO=TCP SPT=43269	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-10-13 05:38:49 UTC · (4 weeks ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET	Hacking IoT Targeted Port Scan
🇺🇸 RAP	2026-10-11 18:56:10 UTC · (1 month ago)	2026-10-11 18:56:10 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 2400:cb00:1056:1000:c93:6f65:a547:b2d8

🇺🇸 136.111.215.157

🇳🇱 86.54.31.36

🇺🇿 83.221.184.95

🇨🇳 120.198.23.233

🇺🇸 104.30.167.164

🇨🇳 101.126.43.201

🇬🇧 86.3.0.150

🇺🇸 66.132.186.188

🇵🇱 2400:cb00:1056:1000:ba22:4661:8ad1:2fb4

🇧🇷 187.53.18.24

🇨🇳 180.101.184.47

🇷🇺 178.154.239.222

🇨🇳 112.194.142.167

🇬🇧 90.192.84.129

🇺🇸 69.12.81.140

🇵🇱 46.149.219.133

🇫🇷 217.76.63.53

🇬🇾 181.199.228.83

🇳🇱 109.160.32.176