JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.139.138.131

185.139.138.131 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 47%: ?

47%

ISP	Uzbektelecom JSC
Usage Type	Mobile ISP
ASN	AS201767
Domain Name	noctelecom.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.139.138.131

Whois 185.139.138.131

IP Abuse Reports for 185.139.138.131:

This IP address has been reported a total of 50 times from 36 distinct sources. 185.139.138.131 was first reported on November 7th 2023, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-13 20:00:49 (5 days ago)	Large-scale coordinated botnet (666+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (666+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/11309/form_key/7kmv9iFdvd3z6JPT/ \| UA: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_11_9; rv:1.9.5.20) Gecko/7378-12-18 22:26:39.872437 Firefox/3.6.11 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇨🇭 Origon	2026-07-10 13:02:01 (1 week ago)	NOQUEUE - IP: 185.139.138.131 - Jul 10 15:02:01 plesk postfix/smtpd[1461342]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.139.138.131 - Jul 10 15:02:01 plesk postfix/smtpd[1461342]: NOQUEUE: reject: RCPT from unknown[185.139.138.131]: 554 5.7.1 Service unavailable; Client host [185.139.138.131] blocked using dnsbl-1.uceprotect.net; IP 185.139.138.131 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.131; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.139.138.131]> show less	Email Spam
🇳🇱 soverin	2026-07-10 10:42:03 (1 week ago)	spam	Email Spam
🇯🇵 jay hung	2026-07-06 06:39:19 (1 week ago)	2026-07-06T06:39:19.082393+00:00 quarktech kernel: [1964616.946178] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-06T06:39:19.082393+00:00 quarktech kernel: [1964616.946178] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=185.139.138.131 DST=172.237.20.248 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=23849 DF PROTO=TCP SPT=25396 DPT=53 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 cocquerez.com	2026-07-05 19:46:56 (1 week ago)	From DMARC report: sender email spoofing for 1 times	Spoofing
🇨🇭 Origon	2026-07-04 23:25:06 (2 weeks ago)	NOQUEUE - IP: 185.139.138.131 - Jul 5 01:25:06 plesk postfix/smtpd[2307272]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.139.138.131 - Jul 5 01:25:06 plesk postfix/smtpd[2307272]: NOQUEUE: reject: RCPT from unknown[185.139.138.131]: 554 5.7.1 Service unavailable; Client host [185.139.138.131] blocked using dnsbl-2.uceprotect.net; Net 185.139.138.0/24 is UCEPROTECT-Level2 listed because 42 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.131 / Net 185.139.138.0/23 is UCEPROTECT-Level2 listed because 43 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.131; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[92.63.205.131]> show less	Email Spam
🇩🇪 kreativstrecke	2026-06-22 14:06:05 (3 weeks ago)	2026-06-22T16:06:02.764141+02:00 srv03 postfix/postscreen[3641859]: PREGREET 22 after 0.13 from [185 ... show more 2026-06-22T16:06:02.764141+02:00 srv03 postfix/postscreen[3641859]: PREGREET 22 after 0.13 from [185.139.138.131]:5848: EHLO [92.63.205.131]\r\n 2026-06-22T16:06:03.857466+02:00 srv03 postfix/postscreen[3641859]: NOQUEUE: reject: RCPT from [185.139.138.131]:5848: 550 5.7.1 Service unavailable; client [185.139.138.131] blocked using zen.spamhaus.org; from=<[email protected]>, to=<[email protected]>, proto=ESMTP, helo=<[92.63.205.131]> 2026-06-22T16:06:04.019613+02:00 srv03 postfix/postscreen[3641859]: HANGUP after 0.52 from [185.139.138.131]:5848 in tests after SMTP handshake ... show less	Brute-Force
🇸🇬 mypatricks	2026-06-19 07:45:21 (1 month ago)	185.139.138.131 \| Port: 12382 \| DNS: 185.139.138.131 2026-06-19T15:45:20+08:00 Asia/Tashkent \| Bad B ... show more 185.139.138.131 \| Port: 12382 \| DNS: 185.139.138.131 2026-06-19T15:45:20+08:00 Asia/Tashkent \| Bad Behavior Activity \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?code=en-gb&redirect=https%3A%2F%2Fxxxxxx%2Ftag%2F%E8%B4%9D%E8%92%82%2FHome-Delivery-Cake-Shop%2F&route=common/language/language \| Ref: - \| Country: UZ/Uzbekistan/+05:00 IP City: Tashkent a0e0e9e489ec60c9-WAW/Warsaw, Poland 1 hits/0 secs Robots 3 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇩🇪 Vegascosmetics	2026-06-18 22:20:22 (1 month ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 mfilser	2026-06-18 21:28:23 (1 month ago)	2026-06-18T23:28:22.264737+02:00 mail postfix/postscreen[113368]: PREGREET 24 after 0.15 from [185.1 ... show more 2026-06-18T23:28:22.264737+02:00 mail postfix/postscreen[113368]: PREGREET 24 after 0.15 from [185.139.138.131]:14725: EHLO [185.139.138.131]\r\n 2026-06-18T23:28:22.698679+02:00 mail postfix/postscreen[113368]: HANGUP after 0.43 from [185.139.138.131]:14725 in tests after SMTP handshake ... show less	Brute-Force
🇫🇷 Duggy_Tuxy🧱	2026-06-15 13:02:09 (1 month ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇳🇱 soverin	2026-06-05 15:16:34 (1 month ago)	spam	Email Spam
🇷🇴 INTEQ	2026-06-01 18:56:31 (1 month ago)	SPAM from 185.139.138.131	Email Spam
🇷🇺 DZBOT	2026-06-01 18:37:06 (1 month ago)	DZBOT. Brute-force users SMTP	Brute-Force
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 6ed80dcf-192e-41b9-b3cf-8e7356812aa9	DDoS Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 77.239.124.241

🇻🇳 14.225.206.187

🇪🇨 186.68.83.105

🇫🇷 185.41.28.101

🇷🇺 178.177.40.170

🇩🇪 178.27.90.142

🇩🇪 167.94.146.33

🇺🇸 143.244.175.22

🇺🇸 74.125.77.81

🇺🇸 65.49.1.74

🇭🇰 42.201.192.23

🇨🇳 14.103.112.42

🇺🇸 216.25.89.157

🇺🇸 166.62.102.109

🇯🇵 164.46.117.229

🇫🇷 82.102.18.190

🇺🇸 198.52.245.208

🇨🇳 175.22.123.206

🇺🇸 162.216.150.16

🇧🇷 136.248.121.226