JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.230.92.198

213.230.92.198 was found in our database!

This IP was reported 114 times. Confidence of Abuse is 80%: ?

80%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Hostname(s)	198.64.uzpak.uz
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.230.92.198

Whois 213.230.92.198

IP Abuse Reports for 213.230.92.198:

This IP address has been reported a total of 114 times from 68 distinct sources. 213.230.92.198 was first reported on August 13th 2023, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 15:01:20 (3 hours ago)	(mod_security) mod_security (id:210350) triggered by 213.230.92.198 (198.64.uzpak.uz): 1 in the last ... show more (mod_security) mod_security (id:210350) triggered by 213.230.92.198 (198.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:01:13.334575 2026] [security2:error] [pid 13724:tid 13724] [client 213.230.92.198:1987] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|wagsgrooming.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wagsgrooming.com"] [uri "/"] [unique_id "aqqvOe2DTNaHLNCiIdyWuAAAAAg"], referer: https://bestfreeseochecker.space/dir/traffic-focused-backlinks-228584 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-11 18:08:30 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 pshost.pl	2026-09-07 18:03:01 (1 week ago)	2026-09-07T18:03:01.630Z, an unauthorized SSH access attempt was detected from source IP address 213 ... show more 2026-09-07T18:03:01.630Z, an unauthorized SSH access attempt was detected from source IP address 213.230.92.198 by our NetFlow-based intrusion detection. show less	Port Scan Brute-Force SSH
🇺🇸 Arjan_S	2026-09-05 22:12:51 (1 week ago)	Found in DMARC reports	Spoofing
🇩🇰 powerhostingdk	2026-09-03 15:23:03 (1 week ago)	[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.	Email Spam Brute-Force
🇺🇸 gui-ying233	2026-08-30 15:25:14 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-29 11:10:08 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 RAP	2026-08-28 17:25:56 (2 weeks ago)	2026-08-28 17:25:56 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 gui-ying233	2026-08-28 15:09:19 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-27 08:05:24 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇰 powerhostingdk	2026-08-25 13:31:11 (3 weeks ago)	[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.	Email Spam Brute-Force
🇺🇸 gui-ying233	2026-08-25 11:15:06 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-25 10:51:39 (3 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: High Priority: %25252F show less	Hacking Exploited Host Web App Attack
🇫🇷 security.rdmc.fr	2026-08-25 10:35:58 (3 weeks ago)	Port Scan Attack proto:TCP src:46894 dst:23	Port Scan
🇺🇸 RAP	2026-08-23 19:16:59 (3 weeks ago)	2026-08-23 19:16:59 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 114 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇰 122.255.14.70

🇫🇷 85.217.140.18

🇺🇸 64.124.12.162

🇳🇱 45.94.31.72

🇺🇸 20.163.11.221

🇭🇺 185.203.187.232

🇺🇸 147.185.132.237

🇰🇿 147.30.54.121

🇩🇪 139.59.133.58

🇺🇸 72.215.46.85

🇮🇳 49.36.216.238

🇦🇺 35.201.17.210

🇸🇬 8.219.142.209

🇺🇸 209.141.37.195

🇮🇳 162.4.81.3

🇮🇳 143.110.244.194

🇫🇷 85.217.140.29

🇺🇸 72.17.34.38

🇺🇸 70.167.234.228

🇹🇭 58.8.168.36