JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.139.138.171

185.139.138.171 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 26%: ?

26%

ISP	Uzbektelecom JSC
Usage Type	Mobile ISP
ASN	AS201767
Domain Name	noctelecom.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.139.138.171

Whois 185.139.138.171

IP Abuse Reports for 185.139.138.171:

This IP address has been reported a total of 21 times from 14 distinct sources. 185.139.138.171 was first reported on February 1st 2025, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 soverin	2026-07-23 16:16:04 (4 days ago)	spam	Email Spam
🇩🇪 pltcldvlpr	2026-07-19 21:41:45 (1 week ago)	Bogus Useragent: 185.139.138.171 - - [19/Jul/2026:23:41:44 +0200] "GET /protocol?id=st_7_117&paragra ... show more Bogus Useragent: 185.139.138.171 - - [19/Jul/2026:23:41:44 +0200] "GET /protocol?id=st_7_117&paragraph=14725386&seq=1596 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/3.1)" asn=201767 org="\x22Uzbektelekom\x22 Joint Stock Company" country=UZ ... show less	Bad Web Bot
Anonymous	2026-07-06 12:30:11 (3 weeks ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/rcf/shopby/manufacturer-polycom-panasonic-rcf-realtronix-lsi-xyz.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇫🇷 Duggy_Tuxy🧱	2026-06-22 16:40:25 (1 month ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇳🇱 soverin	2026-06-21 16:28:03 (1 month ago)	spam	Email Spam
🇹🇷 Threat.live	2026-06-18 04:50:07 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇳🇱 soverin	2026-06-15 06:24:06 (1 month ago)	spam	Email Spam
🇳🇱 soverin	2026-06-05 15:01:42 (1 month ago)	spam	Email Spam
🇨🇭 Origon	2026-05-24 18:59:51 (2 months ago)	NOQUEUE - IP: 185.139.138.171 - May 24 20:59:51 plesk postfix/smtpd[4016116]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.139.138.171 - May 24 20:59:51 plesk postfix/smtpd[4016116]: NOQUEUE: reject: RCPT from unknown[185.139.138.171]: 554 5.7.1 Service unavailable; Client host [185.139.138.171] blocked using dnsbl-1.uceprotect.net; IP 185.139.138.171 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.171; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.139.138.171]> show less	Email Spam
🇦🇺 MAGIC	2026-04-04 03:05:03 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-13 09:48:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 185.139.138.171 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 185.139.138.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 05:48:25.953311 2026] [security2:error] [pid 14276:tid 14276] [client 185.139.138.171:5711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.et.lobibilisim.com"] [uri "/vendor/orangehill/iseed/composer.json"] [unique_id "abPdaWgKzCKy66hz14HC9wAAAAg"], referer: https://www.et.lobibilisim.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-02-14 13:05:32 (5 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
🇺🇸 gui-ying233	2026-02-04 02:45:59 (5 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-01-14 06:10:40 (6 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2026-01-04 10:39:27 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.04 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 157.245.1.7

🇺🇸 2607:f8b0:400c:c06::12d

🇪🇬 197.133.219.11

🇵🇪 179.6.2.244

🇩🇪 178.27.90.142

🇩🇪 156.236.31.85

🇷🇺 154.83.196.237

🇺🇸 152.32.205.153

🇭🇰 152.32.172.177

🇺🇸 108.227.238.92

🇩🇪 69.5.169.190

🇳🇱 46.151.178.13

🇬🇧 35.246.80.146

🇧🇪 35.205.204.150

🇺🇸 2a09:bac5:6d1f:aa::11:1a8

🇧🇷 177.128.190.174

🇺🇸 170.187.165.130

🇫🇮 144.31.109.141

🇫🇮 141.98.86.147

🇩🇪 139.162.149.220