JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

213.230.86.217

Recent Activity

Abuse confidence score ?

80% Critical

76 reports

36 reporters · latest 2 days ago

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Hostname(s)	217.64.uzpak.uz
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 213.230.86.217

Export CSV

This IP address has been reported a total of 76 times from 36 distinct sources. 213.230.86.217 was first reported on April 17th 2022, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: United States of America with 10 reports; Germany with 5 reports; Denmark with 3 reports. The most common categories in these recent reports were: Brute-Force 11 times; Email Spam 10 times; Bad Web Bot 7 times; Port Scan 6 times; Web App Attack 6 times; Other 10 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 raiolanetworks.com	2026-10-05 04:48:51 (2 days ago)	Honeypot detection: SSH/Telnet brute-force. 4 events observed. 2 distinct ports targeted. Reported a ... show more Honeypot detection: SSH/Telnet brute-force. 4 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor. show less	Brute-Force SSH
🇩🇪 WinterGateIC	2026-10-05 03:20:03 (2 days ago)	[RECON] reconnaissance scanning — target profiling \| Stage 1 (Reconnaissance) \| Category: Reconnaiss ... show more [RECON] reconnaissance scanning — target profiling \| Stage 1 (Reconnaissance) \| Category: Reconnaissance \| via GET ssh:// \| at edge perimeter \| target=ssh:// severity=low conf=45% \| NOVEL_PAYLOAD fp=e3da97682737 \| 2026-10-05 03:19:28 UTC report#158 show less	Port Scan Hacking
🇺🇸 Arjan_S	2026-10-04 15:20:19 (2 days ago)	Found in DMARC reports	Spoofing
🇺🇸 MPL	2026-10-03 21:18:20 (3 days ago)	tcp/22 (4 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-10-02 12:56:13 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 213.230.86.217 (217.64.uzpak.uz): 1 in the last ... show more (mod_security) mod_security (id:210350) triggered by 213.230.86.217 (217.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 08:56:07.183008 2026] [security2:error] [pid 18557:tid 18557] [client 213.230.86.217:51274] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|loupgaroubooks.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "loupgaroubooks.com"] [uri "/"] [unique_id "ar-p5wpatkCruT8FeEt1AQAAABE"], referer: https://directorylinks.website/dir/seo-link-building-services-125407 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-02 07:39:51 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 213.230.86.217 (217.64.uzpak.uz): 1 in the last ... show more (mod_security) mod_security (id:210350) triggered by 213.230.86.217 (217.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 03:39:45.286574 2026] [security2:error] [pid 10932:tid 10932] [client 213.230.86.217:9227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|thomasgardner.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thomasgardner.com"] [uri "/"] [unique_id "ar9fwe14OovasUJ-Xu0JKAAAAAk"], referer: https://backlinksubmissionsoftware.site/dir/professional-link-building-212806 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-02 02:52:41 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 213.230.86.217 (217.64.uzpak.uz): 1 in the last ... show more (mod_security) mod_security (id:210350) triggered by 213.230.86.217 (217.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 22:52:36.433947 2026] [security2:error] [pid 21036:tid 21036] [client 213.230.86.217:56929] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|ticmacabotours.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ticmacabotours.com"] [uri "/"] [unique_id "ar8cdAn7ImhB2dBKoj5A5gAAAAE"], referer: https://backlinksubmissionsoftware.site/dir/editorial-seo-backlinks-213316 show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 triplecode	2026-09-29 11:11:18 (1 week ago)	Reported from hMailServer	Email Spam
🇬🇧 djboddington	2026-09-29 09:35:16 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/postscreen-rbl	Email Spam
🇩🇰 powerhostingdk	2026-09-29 05:31:56 (1 week ago)	[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.	Email Spam Brute-Force
Anonymous	2026-09-29 04:30:46 (1 week ago)	5405d2b spam	Email Spam Exploited Host DDoS Attack
🇺🇸 TPI-Abuse	2026-09-26 07:01:42 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 213.230.86.217 (217.64.uzpak.uz): 1 in the last ... show more (mod_security) mod_security (id:210350) triggered by 213.230.86.217 (217.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 03:01:34.094758 2026] [security2:error] [pid 4640:tid 4640] [client 213.230.86.217:37455] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|pleasefixmycomputer.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pleasefixmycomputer.com"] [uri "/"] [unique_id "ardtzpzyTK3pCK-OjQbP4wAAABs"], referer: https://bulkbacklinkanalysis.website/dir/advanced-link-building-163732 show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 noconex	2026-09-24 12:12:08 (1 week ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 213.230.86 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 213.230.86.217 show less	Port Scan Brute-Force SSH
🇩🇪 Vegascosmetics	2026-09-24 09:31:39 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (63, Abuse: 57) show less	Hacking Exploited Host Web App Attack
Anonymous	2026-09-23 23:36:46 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇦 196.115.68.41

🇰🇷 183.109.124.136

🇵🇰 153.117.8.188

🇻🇪 153.51.233.195

🇺🇸 148.59.129.53

🇺🇸 46.110.141.157

🇧🇷 45.181.99.86

🇺🇸 43.153.27.244

🇳🇱 34.178.22.4

🇧🇪 34.156.226.156

🇮🇹 194.60.213.154

🇰🇷 162.158.138.21

🇺🇸 136.124.34.24

🇹🇭 119.42.86.99

🇹🇭 106.0.166.123

🇺🇸 96.126.138.128

🇳🇱 77.239.124.150

🇮🇶 65.20.149.26

🇰🇿 45.138.0.35

🇳🇱 35.214.179.131