JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.230.87.109

213.230.87.109 was found in our database!

This IP was reported 122 times. Confidence of Abuse is 75%: ?

75%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Hostname(s)	109.64.uzpak.uz
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.230.87.109

Whois 213.230.87.109

IP Abuse Reports for 213.230.87.109:

This IP address has been reported a total of 122 times from 73 distinct sources. 213.230.87.109 was first reported on March 22nd 2022, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 soverin	2026-06-25 16:48:02 (6 hours ago)	spam	Email Spam
🇬🇧 Bytemark	2026-06-25 12:18:42 (11 hours ago)	Jun 25 13:18:41 dlcentre3 postfix/smtpd[31680]: NOQUEUE: reject: RCPT from unknown[213.230.87.109]: ... show more Jun 25 13:18:41 dlcentre3 postfix/smtpd[31680]: NOQUEUE: reject: RCPT from unknown[213.230.87.109]: 554 5.7.1 Service unavailable; Client host [213.230.87.109] blocked using cbl.abuseat.org; Listed by XBL, see https://check.spamhaus.org/query/ip/213.230.87.109; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[0.0.0.0]> show less	Email Spam Spoofing Brute-Force Exploited Host
Anonymous	2026-06-25 10:52:47 (12 hours ago)	SPAM EMAIL 213.230.87.109 (RBL_TRIGGER)	Email Spam
🇮🇹 mgarofano80	2026-06-21 19:38:57 (4 days ago)		Brute-Force Web App Attack
Anonymous	2026-06-21 15:15:46 (4 days ago)	Web attack blocked by Wordfence on www.museumvalkenburg.nl (1 hit). Reported by CRMON.	Web App Attack
🇩🇪 konseptit	2026-06-21 11:39:42 (4 days ago)	(wordpress) Failed wordpress login from 213.230.87.109 (UZ/Uzbekistan/109.64.uzpak.uz)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-20 21:04:11 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 213.230.87.109 (109.64.uzpak.uz): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 213.230.87.109 (109.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 17:04:07.414125 2026] [security2:error] [pid 3743:tid 3743] [client 213.230.87.109:46692] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|saadeh.ws\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "saadeh.ws"] [uri "/wp-json/wp/v2/users"] [unique_id "ajcARwPUel47-sivRyu18QAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-20 10:38:35 (5 days ago)	[SatJun2012:38:30.4266872026][security2:error][pid3728194:tid3728451][client213.230.87.109:0]ModSecu ... show more [SatJun2012:38:30.4266872026][security2:error][pid3728194:tid3728451][client213.230.87.109:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ch-garantie.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajZtphMKiGQX-FQCvN-80QAAAQg\"] show less	Hacking Web App Attack
🇦🇺 prologic	2026-06-13 17:51:49 (1 week ago)	Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated re ... show more Distributed application-layer DoS against git.mills.io (self-hosted Gitea). High-volume automated requests to expensive Git repository endpoints (commit/diff/blame/archive views), ~1 request per IP, spoofed browser UA, rejected with HTTP 429. Residential-proxy botnet campaign, 2026-06-13/14 UTC. show less	DDoS Attack Web App Attack
🇳🇱 soverin	2026-06-10 10:48:17 (2 weeks ago)	spam	Email Spam
🇩🇪 Vegascosmetics	2026-06-07 06:36:53 (2 weeks ago)	Kingcopy(AI-IDS) Report: IP automatically blocked after obfuscated encoding. Vegas Security System	DDoS Attack Hacking Bad Web Bot
🇳🇱 soverin	2026-06-05 15:04:43 (2 weeks ago)	spam	Email Spam
Anonymous	2026-06-04 04:30:36 (3 weeks ago)	Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signatur ... show more Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 \| Attack Signature Blocked: /wishlist/index/add/product/490/form_key/ckEaaVkq7rl8zSrk/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gec... show less	Hacking Bad Web Bot Web App Attack
🇳🇴 Abuse Buster	2026-06-02 09:03:10 (3 weeks ago)	2026-06-02T11:03:09.620166+02:00 mx postfix/dnsblog[640010]: addr 213.230.87.109 listed by domain ze ... show more 2026-06-02T11:03:09.620166+02:00 mx postfix/dnsblog[640010]: addr 213.230.87.109 listed by domain zen.spamhaus.org as 127.0.0.4 2026-06-02T11:03:09.620286+02:00 mx postfix/dnsblog[640010]: addr 213.230.87.109 listed by domain zen.spamhaus.org as 127.0.0.11 2026-06-02T11:03:09.620345+02:00 mx postfix/dnsblog[640010]: addr 213.230.87.109 listed by domain zen.spamhaus.org as 127.0.0.3 ... show less	Email Spam
Anonymous	2026-05-26 06:38:01 (4 weeks ago)	2026-05-26T08:31:05.729267+02:00 postfix/postscreen[1892894]: NOQUEUE: reject: RCPT from [213.230.8 ... show more 2026-05-26T08:31:05.729267+02:00 postfix/postscreen[1892894]: NOQUEUE: reject: RCPT from [213.230.87.109]:38670: 550 5.7.1 Service unavailable; client [213.230.87.109] blocked using bl.mailspike.net; proto=ESMTP, helo=<[213.230.87.109]> 2026-05-26T08:34:32.347456+02:00 postfix/postscreen[1895104]: NOQUEUE: reject: RCPT from [213.230.87.109]:28206: 550 5.7.1 Service unavailable; client [213.230.87.109] blocked using bl.mailspike.net; proto=ESMTP, helo=<[213.230.87.109]> 2026-05-26T08:37:58.973470+02:00 postfix/postscreen[1895104]: NOQUEUE: reject: RCPT from [213.230.87.109]:23721: 550 5.7.1 Service unavailable; client [213.230.87.109] blocked using bl.mailspike.net; proto=ESMTP, helo=<[213.230.87.109]> show less	Email Spam

Showing 1 to 15 of 122 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 217.160.226.51

🇩🇪 172.70.246.200

🇵🇰 160.187.180.173

🇨🇳 115.213.247.145

🇨🇳 101.76.248.214

🇺🇸 66.132.186.244

🇺🇸 44.191.206.242

🇺🇸 44.43.52.63

🇺🇸 34.125.12.180

🇺🇸 34.21.109.137

🇺🇸 18.232.36.1

🇳🇱 204.76.203.206

🇳🇱 176.65.139.181

🇨🇳 125.124.63.31

🇻🇳 103.189.208.13

🇱🇹 45.227.254.170

🇺🇸 44.251.239.16

🇺🇸 37.140.223.201

🇺🇸 34.31.22.129

🇮🇹 34.17.9.121