JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.139.138.64

185.139.138.64 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 27%: ?

27%

ISP	Uzbektelecom JSC
Usage Type	Mobile ISP
ASN	AS201767
Domain Name	noctelecom.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.139.138.64

Whois 185.139.138.64

IP Abuse Reports for 185.139.138.64:

This IP address has been reported a total of 30 times from 22 distinct sources. 185.139.138.64 was first reported on October 23rd 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Duggy_Tuxy🧱	2026-06-19 15:55:50 (13 hours ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇳🇱 soverin	2026-06-05 15:28:03 (2 weeks ago)	spam	Email Spam
🇳🇱 soverin	2026-05-29 10:17:05 (3 weeks ago)	spam	Email Spam
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇨🇭 Origon	2026-05-04 12:02:57 (1 month ago)	NOQUEUE - IP: 185.139.138.64 - May 4 14:02:57 plesk postfix/smtpd[2822371]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 185.139.138.64 - May 4 14:02:57 plesk postfix/smtpd[2822371]: NOQUEUE: reject: RCPT from unknown[185.139.138.64]: 554 5.7.1 Service unavailable; Client host [185.139.138.64] blocked using dnsbl-2.uceprotect.net; Net 185.139.138.0/24 is UCEPROTECT-Level2 listed because 222 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.64 / Net 185.139.138.0/23 is UCEPROTECT-Level2 listed because 226 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.64; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.139.137.127]> show less	Email Spam
Anonymous	2026-04-24 07:39:42 (1 month ago)	SMTP scanner - relay access denied	Brute-Force Exploited Host
🇬🇧 transcom	2026-04-22 06:45:59 (1 month ago)	Spam #2 to aquilina.co.uk (trap_type=honeypot_direct, from=aquilina.co.uk)	Web Spam
🇺🇸 TPI-Abuse	2026-04-06 11:05:08 (2 months ago)	(mod_security) mod_security (id:217210) triggered by 185.139.138.64 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217210) triggered by 185.139.138.64 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 07:05:04.787706 2026] [security2:error] [pid 27718:tid 27718] [client 185.139.138.64:20901] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|www.ericgwin.com\|F\|4"] [data "GET http://www.ericgwin.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ericgwin.com"] [uri "/"] [unique_id "adOTYJ9_ITQ2Nzg7VUFRrgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-04-02 22:07:38 (2 months ago)	NOQUEUE - IP: 185.139.138.64 - Apr 3 00:07:38 plesk postfix/smtpd[1028873]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 185.139.138.64 - Apr 3 00:07:38 plesk postfix/smtpd[1028873]: NOQUEUE: reject: RCPT from unknown[185.139.138.64]: 554 5.7.1 Service unavailable; Client host [185.139.138.64] blocked using dnsbl-2.uceprotect.net; Net 185.139.138.0/24 is UCEPROTECT-Level2 listed because 367 impacts are seen from UZMOBILE-AS Nukus str. 22A, Tashkent 100100, Uzbekistan, UZ/AS201767 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.139.138.64; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.139.138.64]> show less	Email Spam
🇨🇭 backslash	2026-02-09 14:45:16 (4 months ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇳🇱 i-turnradio.nl	2026-01-23 04:11:00 (4 months ago)	2026-01-23 05:11:00 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇺🇸 MPL	2026-01-18 15:13:02 (5 months ago)	tcp/23 (4 or more attempts)	Port Scan
🇩🇪 london2038.com	2025-12-14 17:06:34 (6 months ago)	Connection atttempts against closed TCP ports Dec 14 18:06:21 BLOCK SRC=185.139.138.64 LEN=52 TOS=0x ... show more Connection atttempts against closed TCP ports Dec 14 18:06:21 BLOCK SRC=185.139.138.64 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=20442 DF PROTO=TCP SPT=18557 DPT=443 WINDOW=32038 RES=0x00 ACK FIN Dec 14 18:06:26 BLOCK SRC=185.139.138.64 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=20444 DF PROTO=TCP SPT=18557 DPT=443 WINDOW=32038 RES=0x00 ACK FIN Dec 14 18:06:33 BLOCK SRC=185.139.138.64 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=20445 DF PROTO=TCP SPT=18557 DPT=443 WINDOW=32038 RES=0x00 ACK FIN show less	Port Scan
Anonymous	2025-11-25 18:51:11 (6 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-20 08:25:06 (6 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 155.117.105.13

🇮🇹 82.51.158.253

🇧🇬 79.124.62.178

🇺🇸 64.62.156.192

🇺🇸 35.171.182.125

🇺🇸 20.168.127.99

🇮🇩 157.85.210.44

🇭🇰 47.82.87.119

🇦🇺 2404:6800:4006:1002::123

🇩🇪 213.209.159.241

🇮🇳 103.206.97.139

🇧🇩 103.183.62.1

🇮🇳 122.166.190.190

🇨🇳 120.76.240.4

🇨🇳 119.116.36.92

🇸🇬 119.28.106.227

🇮🇳 103.206.97.137

🇮🇳 103.161.98.17

🇧🇬 91.191.209.46

🇺🇸 54.80.112.120