This IP address has been reported a total of
62
times from
37 distinct
sources.
185.139.138.159 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ...
show moreBnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
185.139.138.159 443 - [22/Aug/2026:05:38:09 +0000] "GET [redacted] HTTP/1.1" 200 6977 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
show less
NOQUEUE - IP: 185.139.138.159 - Aug 5 10:17:33 plesk postfix/smtpd[118270]: NOQUEUE: reject: RCPT f ...
show moreNOQUEUE - IP: 185.139.138.159 - Aug 5 10:17:33 plesk postfix/smtpd[118270]: NOQUEUE: reject: RCPT from unknown[185.139.138.159]: 554 5.7.1 Service unavailable; Client host [185.139.138.159] blocked using dnsbl-1.uceprotect.net; IP 185.139.138.159 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.159; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.139.138.159]>
show less
NOQUEUE - IP: 185.139.138.159 - Jul 28 08:01:30 plesk postfix/smtpd[482004]: NOQUEUE: reject: RCPT ...
show moreNOQUEUE - IP: 185.139.138.159 - Jul 28 08:01:30 plesk postfix/smtpd[482004]: NOQUEUE: reject: RCPT from unknown[185.139.138.159]: 554 5.7.1 Service unavailable; Client host [185.139.138.159] blocked using dnsbl-2.uceprotect.net; Net 185.139.138.0/23 is UCEPROTECT-Level2 listed because 61 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.159 / Net 185.139.138.0/24 is UCEPROTECT-Level2 listed because 61 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.159; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.139.138.159]>
show less