JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.213.229.116

185.213.229.116 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 27%: ?

27%

ISP	UNIVERSAL MOBILE SYSTEMS LLC
Usage Type	Mobile ISP
ASN	AS64466
Domain Name	mobi.uz
Country	🇺🇿 Uzbekistan
City	Qarshi, Qashqadaryo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.213.229.116

Whois 185.213.229.116

IP Abuse Reports for 185.213.229.116:

This IP address has been reported a total of 28 times from 18 distinct sources. 185.213.229.116 was first reported on September 18th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-07-16 18:48:30 (1 week ago)	NOQUEUE - IP: 185.213.229.116 - Jul 16 20:48:30 plesk postfix/smtpd[3100170]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.213.229.116 - Jul 16 20:48:30 plesk postfix/smtpd[3100170]: NOQUEUE: reject: RCPT from unknown[185.213.229.116]: 554 5.7.1 Service unavailable; Client host [185.213.229.116] blocked using dnsbl-2.uceprotect.net; Net 185.213.228.0/22 is UCEPROTECT-Level2 listed because 68 impacts are seen from UMS-AS, UZ/AS64466 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.213.229.116 / Net 185.213.229.0/24 is UCEPROTECT-Level2 listed because 31 impacts are seen from UMS-AS, UZ/AS64466 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.213.229.116; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.213.229.116]> show less	Email Spam
Anonymous	2026-07-09 04:45:22 (2 weeks ago)	Large-scale coordinated botnet (250+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (250+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/11163/form_key/cpSfR6Ycic8cyurw/ \| UA: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_9_8 rv:5.0; nn-NO) AppleWebKit/535.31.6 (KHTML, like Gecko) Version/4.0 Safari/535.31.6 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 07:40:38 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇯🇵 jay hung	2026-06-20 08:52:17 (1 month ago)	2026-06-20T08:52:16.408518+00:00 quarktech kernel: [590189.723940] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ... show more 2026-06-20T08:52:16.408518+00:00 quarktech kernel: [590189.723940] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=185.213.229.116 DST=172.237.20.248 LEN=1309 TOS=0x00 PREC=0x00 TTL=43 ID=0 DF PROTO=UDP SPT=48320 DPT=53 LEN=1289 ... show less	Port Scan
🇨🇭 Origon	2026-06-19 07:00:56 (1 month ago)	NOQUEUE - IP: 185.213.229.116 - Jun 19 09:00:56 plesk postfix/smtpd[476810]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.213.229.116 - Jun 19 09:00:56 plesk postfix/smtpd[476810]: NOQUEUE: reject: RCPT from unknown[185.213.229.116]: 554 5.7.1 Service unavailable; Client host [185.213.229.116] blocked using dnsbl-1.uceprotect.net; IP 185.213.229.116 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.213.229.116; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.213.229.116]> show less	Email Spam
🇳🇱 soverin	2026-06-16 12:45:05 (1 month ago)	spam	Email Spam
🇳🇱 soverin	2026-06-13 07:22:04 (1 month ago)	spam	Email Spam
🇷🇺 Agrohim	2026-05-29 00:23:40 (1 month ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 1175168a-7e6d-467e-bb9a-dd1cdfa3fb9e	DDoS Attack
🇬🇧 PeravixGroup	2026-05-06 17:00:23 (2 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
Anonymous	2026-04-19 15:40:59 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇨🇭 Origon	2026-03-31 00:20:53 (3 months ago)	NOQUEUE - IP: 185.213.229.116 - Mar 31 02:20:53 plesk postfix/smtpd[3962301]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.213.229.116 - Mar 31 02:20:53 plesk postfix/smtpd[3962301]: NOQUEUE: reject: RCPT from unknown[185.213.229.116]: 554 5.7.1 Service unavailable; Client host [185.213.229.116] blocked using dnsbl-1.uceprotect.net; IP 185.213.229.116 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=185.213.229.116; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.213.229.116]> show less	Email Spam
🇳🇱 Cloud86 B.V.	2026-03-29 22:00:05 (3 months ago)	categories: Email Spam	Email Spam
🇺🇸 kosada.com	2026-03-08 16:12:10 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-03-01 00:43:51 (4 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.1 ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.194

🇩🇪 165.245.243.213

🇫🇮 147.185.133.147

🇳🇱 195.178.110.137

🇳🇱 185.242.226.104

🇨🇴 179.32.222.55

🇧🇩 103.213.236.115

🇬🇧 34.13.59.94

🇺🇬 196.0.54.114

🇭🇰 172.253.237.20

🇮🇳 159.65.152.186

🇨🇳 115.230.115.224

🇸🇬 47.128.54.176

🇯🇵 8.216.8.45

🇲🇽 200.77.172.159

🇲🇽 189.206.189.150

🇨🇴 181.51.91.31

🇵🇱 176.53.159.197

🇭🇰 172.253.237.23

🇮🇳 103.161.31.5