JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.139.138.35

185.139.138.35 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 40%: ?

40%

ISP	Uzbektelecom JSC
Usage Type	Mobile ISP
ASN	AS201767
Domain Name	noctelecom.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.139.138.35

Whois 185.139.138.35

IP Abuse Reports for 185.139.138.35:

This IP address has been reported a total of 37 times from 27 distinct sources. 185.139.138.35 was first reported on February 13th 2024, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 20:20:29 (8 hours ago)	(mod_security) mod_security (id:210350) triggered by 185.139.138.35 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 185.139.138.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:20:21.848808 2026] [security2:error] [pid 347355:tid 347355] [client 185.139.138.35:40331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|rewirenetworks.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rewirenetworks.com"] [uri "/"] [unique_id "aqr6BWPonB9fcrVbDQHtrwAAAB0"], referer: https://checkbacklinks.space/dir/contextual-seo-backlinks-176117 show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-15 05:04:24 (1 day ago)	2026-09-15T07:04:23.660545+02:00 vps kernel: [5819466.345034] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-09-15T07:04:23.660545+02:00 vps kernel: [5819466.345034] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=185.139.138.35 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=17383 DF PROTO=TCP SPT=42945 DPT=21 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Anonymous	2026-09-15 03:12:54 (2 days ago)	denied traffic to a honeypot network. destination port 21.	Port Scan Hacking
🇺🇸 gui-ying233	2026-09-05 08:32:23 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-29 10:10:24 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇪🇸 el-brujo	2026-08-27 17:46:07 (2 weeks ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 kosada.com	2026-08-26 18:24:33 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇳🇱 soverin	2026-07-16 23:34:04 (2 months ago)	spam	Email Spam
🇩🇪 Vegascosmetics	2026-07-05 07:19:07 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇨🇭 Origon	2026-06-17 05:33:25 (2 months ago)	NOQUEUE - IP: 185.139.138.35 - Jun 17 07:33:25 plesk postfix/smtpd[973086]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 185.139.138.35 - Jun 17 07:33:25 plesk postfix/smtpd[973086]: NOQUEUE: reject: RCPT from unknown[185.139.138.35]: 554 5.7.1 Service unavailable; Client host [185.139.138.35] blocked using dnsbl-2.uceprotect.net; Net 185.139.138.0/23 is UCEPROTECT-Level2 listed because 93 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.35 / Net 185.139.138.0/24 is UCEPROTECT-Level2 listed because 93 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.35; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<[92.63.205.190]> show less	Email Spam
🇳🇱 soverin	2026-06-08 10:40:07 (3 months ago)	spam	Email Spam
🇩🇪 Viveronese	2026-06-08 04:45:03 (3 months ago)	SASL LOGIN authentication failed	Brute-Force
🇮🇹 roboware	2026-06-07 13:29:24 (3 months ago)	IP address identified by DMARC report	Email Spam Spoofing
🇳🇱 soverin	2026-06-05 15:21:20 (3 months ago)	spam	Email Spam
🇺🇸 TPI-Abuse	2026-06-04 04:50:19 (3 months ago)	(mod_security) mod_security (id:217210) triggered by 185.139.138.35 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 185.139.138.35 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 00:50:16.091323 2026] [security2:error] [pid 9399:tid 9399] [client 185.139.138.35:37318] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|moon7discovers.shop\|F\|4"] [data "GET http://moon7discovers.shop HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "moon7discovers.shop"] [uri "/"] [unique_id "aiEECN-9Xkm5qzN1KcIrogAAACY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.204

🇦🇷 190.230.157.24

🇧🇷 190.115.84.25

🇺🇸 162.216.150.202

🇨🇦 143.110.222.168

🇺🇸 143.42.1.53

🇰🇷 115.68.208.117

🇺🇸 97.241.162.117

🇳🇱 87.239.13.42

🇵🇱 82.23.119.39

🇩🇪 69.5.169.248

🇺🇸 64.62.197.139

🇺🇸 64.62.197.100

🇺🇸 64.62.156.122

🇺🇸 64.62.156.90

🇳🇱 45.138.12.28

🇮🇩 34.50.98.224

🇺🇸 3.227.188.72

🇨🇳 218.107.47.230

🇨🇱 186.107.80.243