JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.230.92.98

213.230.92.98 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 74%: ?

74%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Hostname(s)	98.64.uzpak.uz
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.230.92.98

Whois 213.230.92.98

IP Abuse Reports for 213.230.92.98:

This IP address has been reported a total of 126 times from 73 distinct sources. 213.230.92.98 was first reported on June 9th 2023, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ger-stg-sifi1	2026-06-30 02:00:41 (4 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 23:26:28 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.230.92.98 (98.64.uzpak.uz): 1 in the last 3 ... show more (mod_security) mod_security (id:210492) triggered by 213.230.92.98 (98.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 19:26:22.319020 2026] [security2:error] [pid 8429:tid 8429] [client 213.230.92.98:36023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tecnoconce.com"] [uri "/.env.development"] [unique_id "akL_HrAB505iqTJHBTlAiwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-29 19:21:39 (10 hours ago)	[MonJun2921:21:36.3399132026][security2:error][pid3992628:tid3992655][client213.230.92.98:0]ModSecur ... show more [MonJun2921:21:36.3399132026][security2:error][pid3992628:tid3992655][client213.230.92.98:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.distributori-automatici-ticino.ch.cadvending.ch\"][uri\"/client/.env\"][unique_id\"akLFwIsWVWqmeUUR_ST52gAAABM\"] show less	Hacking Web App Attack
🇮🇹 A000Z	2026-06-29 14:28:07 (15 hours ago)	Fail2Ban: 213.230.92.98 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 213.230.92.98 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 nodepile	2026-06-28 07:07:11 (1 day ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-26 06:51:46 (3 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
Anonymous	2026-06-25 11:16:15 (4 days ago)	SPAM EMAIL 213.230.92.98 (RBL_TRIGGER)	Email Spam
🇳🇱 soverin	2026-06-24 16:01:08 (5 days ago)	spam	Email Spam
🇨🇭 Origon	2026-06-19 14:01:26 (1 week ago)	NOQUEUE - IP: 213.230.92.98 - Jun 19 16:01:26 plesk postfix/smtpd[997128]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 213.230.92.98 - Jun 19 16:01:26 plesk postfix/smtpd[997128]: NOQUEUE: reject: RCPT from unknown[213.230.92.98]: 554 5.7.1 Service unavailable; Client host [213.230.92.98] blocked using dnsbl-2.uceprotect.net; Net 213.230.92.0/24 is UCEPROTECT-Level2 listed because 237 impacts are seen from BRM-AS, UZ/AS8193 there. See: http://www.uceprotect.net/rblcheck.php?ipr=213.230.92.98 / Net 213.230.92.0/23 is UCEPROTECT-Level2 listed because 446 impacts are seen from BRM-AS, UZ/AS8193 there. See: http://www.uceprotect.net/rblcheck.php?ipr=213.230.92.98 / Net 213.230.64.0/18 is UCEPROTECT-Level2 listed because 1330 impacts are seen from BRM-AS, UZ/AS8193 there. See: http://www.uceprotect.net/rblcheck.php?ipr=21; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<[0.0.0.0]> show less	Email Spam
🇳🇱 soverin	2026-06-17 17:21:06 (1 week ago)	spam	Email Spam
🇳🇱 soverin	2026-06-14 05:55:04 (2 weeks ago)	spam	Email Spam
🇪🇸 librebit	2026-06-14 01:02:03 (2 weeks ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇦🇹 AustrianSimon	2026-06-11 19:20:48 (2 weeks ago)	11 Jun 2026 19:20:48UTC:spam originating from IP address 213.230.92.98 containing illegal criminal e ... show more 11 Jun 2026 19:20:48UTC:spam originating from IP address 213.230.92.98 containing illegal criminal extortionate content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address 16FnhJgft5PxM3QNRjq9FiafkKHAAv8Ngy show less	Email Spam
🇳🇱 soverin	2026-06-11 14:25:02 (2 weeks ago)	spam	Email Spam
🇨🇭 Origon	2026-06-08 12:16:16 (3 weeks ago)	NOQUEUE - IP: 213.230.92.98 - Jun 8 14:16:16 plesk postfix/smtpd[2229342]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 213.230.92.98 - Jun 8 14:16:16 plesk postfix/smtpd[2229342]: NOQUEUE: reject: RCPT from unknown[213.230.92.98]: 554 5.7.1 Service unavailable; Client host [213.230.92.98] blocked using dnsbl-1.uceprotect.net; IP 213.230.92.98 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=213.230.92.98; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<[213.230.92.98]> show less	Email Spam

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 220.235.225.112

🇧🇪 198.235.24.234

🇬🇧 193.163.125.158

🇺🇸 178.156.195.191

🇺🇸 162.144.61.95

🇨🇳 144.123.77.126

🇨🇳 120.230.180.198

🇵🇱 95.214.53.157

🇵🇭 61.28.144.154

🇺🇸 45.33.94.76

🇮🇹 31.59.89.180

🇰🇷 118.37.214.187

🇮🇪 108.130.71.138

🇺🇸 100.29.192.114

🇺🇸 70.32.90.136

🇳🇱 45.198.224.46

🇩🇪 44.149.46.108

🇵🇱 23.27.251.141

🇨🇦 4.239.240.98

🇺🇸 2604:a940:300:5b6:0:f::