JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.230.87.53

213.230.87.53 was found in our database!

This IP was reported 131 times. Confidence of Abuse is 39%: ?

39%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Hostname(s)	53.64.uzpak.uz
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.230.87.53

Whois 213.230.87.53

IP Abuse Reports for 213.230.87.53:

This IP address has been reported a total of 131 times from 75 distinct sources. 213.230.87.53 was first reported on April 14th 2022, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-07-16 05:28:22 (3 days ago)	NOQUEUE - IP: 213.230.87.53 - Jul 16 07:28:21 plesk postfix/smtpd[2111149]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 213.230.87.53 - Jul 16 07:28:21 plesk postfix/smtpd[2111149]: NOQUEUE: reject: RCPT from unknown[213.230.87.53]: 554 5.7.1 Service unavailable; Client host [213.230.87.53] blocked using dnsbl-1.uceprotect.net; IP 213.230.87.53 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=213.230.87.53; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[213.230.93.1]> show less	Email Spam
🇺🇸 TPI-Abuse	2026-07-06 05:36:56 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 213.230.87.53 (53.64.uzpak.uz): 1 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 213.230.87.53 (53.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 01:36:48.550516 2026] [security2:error] [pid 26336:tid 26336] [client 213.230.87.53:49457] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 213.230.87.53 (+1 hits since last alert)\|serranoscoffee.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "serranoscoffee.com"] [uri "/xmlrpc.php"] [unique_id "aks-8O76blcGY7r_FOnNzwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-06 00:45:53 (1 week ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/panasonic/shopby/manufacturer-panasonic-tv_one-lsi-aruba_networks-haivision-xyz.html?p=4 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇩🇪 Tsumugi Kotobuki	2026-07-04 16:11:19 (2 weeks ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 52 \| Len: 60B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 52 \| Len: 60B \| Win: 65535(1) \| rDNS: 53.64.uzpak.uz \| F2B/ufw-honeypot@2026-07-04T16:11:19Z show less	Port Scan Hacking
🇳🇱 soverin	2026-06-24 05:57:07 (3 weeks ago)	spam	Email Spam
🇳🇱 soverin	2026-06-20 20:50:04 (4 weeks ago)	spam	Email Spam
🇳🇱 soverin	2026-06-16 11:57:06 (1 month ago)	spam	Email Spam
🇩🇪 Vegascosmetics	2026-06-09 04:29:17 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
🇺🇸 nodepile	2026-06-08 11:26:13 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇳🇱 soverin	2026-06-08 07:28:05 (1 month ago)	spam	Email Spam
🇩🇪 pltcldvlpr	2026-06-05 04:26:34 (1 month ago)	Bogus Useragent: 213.230.87.53 - - [05/Jun/2026:06:26:34 +0200] "GET /protocol?id=hb_19_81&paragraph ... show more Bogus Useragent: 213.230.87.53 - - [05/Jun/2026:06:26:34 +0200] "GET /protocol?id=hb_19_81&paragraph=4361970&seq=984 HTTP/1.1" 444 0 "-" "Opera/9.31.(Windows NT 5.2; tig-ER) Presto/2.9.190 Version/12.00" asn=8193 org="\x22Uzbektelekom\x22 Joint Stock Company" country=UZ ... show less	Bad Web Bot
🇳🇱 soverin	2026-06-04 21:37:06 (1 month ago)	spam	Email Spam
🇩🇪 EGP Abuse Dept	2026-05-25 10:55:07 (1 month ago)	Numeric HELO: 213.230.87.53	Email Spam Exploited Host
Anonymous	2026-05-25 06:06:40 (1 month ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host
🇩🇪 bescared	2026-05-21 17:36:39 (1 month ago)	F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -1ce9a8a2-	Port Scan

Showing 1 to 15 of 131 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 209.38.120.71

🇷🇺 155.212.17.174

🇹🇭 152.32.245.170

🇦🇫 149.54.62.54

🇨🇳 122.230.51.88

🇨🇳 118.196.16.16

🇨🇳 59.52.103.68

🇺🇸 20.127.18.0

🇩🇪 8.211.46.188

🇹🇭 202.29.234.42

🇷🇺 195.9.66.98

🇳🇱 185.180.223.129

🇮🇹 151.0.154.194

🇮🇳 122.187.229.220

🇻🇳 103.104.117.197

🇷🇺 83.167.19.121

🇳🇱 45.148.10.157

🇧🇷 20.206.89.130

🇹🇷 213.43.33.107

🇺🇸 162.217.100.201