JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.139.138.1

185.139.138.1 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 37%: ?

37%

ISP	Uzbektelecom JSC
Usage Type	Mobile ISP
ASN	AS201767
Domain Name	noctelecom.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.139.138.1

Whois 185.139.138.1

IP Abuse Reports for 185.139.138.1:

This IP address has been reported a total of 35 times from 27 distinct sources. 185.139.138.1 was first reported on October 3rd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 soverin	2026-06-22 06:30:07 (1 day ago)	spam	Email Spam
🇳🇱 soverin	2026-06-11 10:53:03 (1 week ago)	spam	Email Spam
🇫🇮 notelseit	2026-06-11 05:12:02 (1 week ago)	2026-06-11T07:11:01.198856+02:00 mail postfix/smtpd[1217302]: NOQUEUE: reject: RCPT from unknown[185 ... show more 2026-06-11T07:11:01.198856+02:00 mail postfix/smtpd[1217302]: NOQUEUE: reject: RCPT from unknown[185.139.138.1]: 450 4.7.25 Client host rejected: cannot find your hostname, [185.139.138.1]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[185.139.138.1]> 2026-06-11T07:11:01.333331+02:00 mail postfix/smtpd[1217302]: lost connection after RCPT from unknown[185.139.138.1] 2026-06-11T07:12:02.041377+02:00 mail postfix/smtpd[1218674]: NOQUEUE: reject: RCPT from unknown[185.139.138.1]: 450 4.7.25 Client host rejected: cannot find your hostname, [185.139.138.1]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[185.139.138.1]> ... show less	Brute-Force Email Spam
🇩🇪 Vegascosmetics	2026-06-10 12:42:36 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇳🇱 soverin	2026-06-05 15:22:12 (2 weeks ago)	spam	Email Spam
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 1c72ea9a-d634-4668-a8aa-89a786da95ec	DDoS Attack
🇨🇭 Origon	2026-05-25 08:46:11 (4 weeks ago)	NOQUEUE - IP: 185.139.138.1 - May 25 10:46:11 plesk postfix/smtpd[1015938]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 185.139.138.1 - May 25 10:46:11 plesk postfix/smtpd[1015938]: NOQUEUE: reject: RCPT from unknown[185.139.138.1]: 554 5.7.1 Service unavailable; Client host [185.139.138.1] blocked using dnsbl-1.uceprotect.net; IP 185.139.138.1 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.1; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.139.138.1]> show less	Email Spam
🇬🇧 PeravixGroup	2026-05-18 16:02:31 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇬🇧 killian7603	2026-05-14 16:39:18 (1 month ago)	Logon Policy Violation	Email Spam Spoofing Brute-Force
🇩🇪 milcraft.nl	2026-05-12 15:53:47 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
Anonymous	2026-05-08 20:04:59 (1 month ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇩🇪 jonathanselea.se	2026-05-02 06:30:37 (1 month ago)	May 2 08:30:36 mx1 postfix/postscreen[1656507]: PREGREET 22 after 0.16 from [185.139.138.1]:63966: ... show more May 2 08:30:36 mx1 postfix/postscreen[1656507]: PREGREET 22 after 0.16 from [185.139.138.1]:63966: EHLO [185.139.138.1]\r\n ... show less	DDoS Attack Email Spam Brute-Force Exploited Host
🇨🇭 Origon	2026-04-26 16:15:57 (1 month ago)	NOQUEUE - IP: 185.139.138.1 - Apr 26 18:15:57 plesk postfix/smtpd[1002848]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 185.139.138.1 - Apr 26 18:15:57 plesk postfix/smtpd[1002848]: NOQUEUE: reject: RCPT from unknown[185.139.138.1]: 554 5.7.1 Service unavailable; Client host [185.139.138.1] blocked using dnsbl-2.uceprotect.net; Net 185.139.138.0/24 is UCEPROTECT-Level2 listed because 261 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.1 / Net 185.139.138.0/23 is UCEPROTECT-Level2 listed because 263 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.1; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.139.138.1]> show less	Email Spam
🇫🇷 SpaceHost-Server	2026-04-07 22:30:21 (2 months ago)		Brute-Force Web App Attack
🇨🇭 backslash	2026-03-19 14:36:07 (3 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.93.89.167

🇭🇰 165.154.6.75

🇺🇸 107.151.249.168

🇳🇱 91.92.40.13

🇧🇾 81.30.98.142

🇺🇸 45.84.120.3

🇮🇱 37.25.36.197

🇮🇩 34.34.223.108

🇮🇩 27.121.83.84

🇺🇸 17.241.75.210

🇰🇷 222.239.251.12

🇮🇩 203.175.125.194

🇬🇧 193.32.209.252

🇧🇷 177.38.15.73

🇭🇰 150.5.131.119

🇦🇫 149.54.62.2

🇫🇮 147.78.181.105

🇩🇪 139.59.208.225

🇺🇸 107.155.48.84

🇳🇱 91.92.40.8