JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.213.229.141

185.213.229.141 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 40%: ?

40%

ISP	UNIVERSAL MOBILE SYSTEMS LLC
Usage Type	Mobile ISP
ASN	AS64466
Domain Name	mobi.uz
Country	🇺🇿 Uzbekistan
City	Urganch, Xorazm Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.213.229.141

Whois 185.213.229.141

IP Abuse Reports for 185.213.229.141:

This IP address has been reported a total of 34 times from 27 distinct sources. 185.213.229.141 was first reported on February 28th 2024, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-06 14:24:56 (19 hours ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 webgobe	2026-07-04 12:06:35 (2 days ago)	wew-Joomla User : try to access forms...	Hacking
🇺🇸 nodepile	2026-07-02 15:23:43 (4 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0') show less	Web App Attack Exploited Host
🇪🇸 librebit	2026-07-02 09:55:01 (4 days ago)	Listed IP in blacklist by postfix/dnsblog	Spoofing
🇳🇱 soverin	2026-06-20 15:16:16 (2 weeks ago)	spam	Email Spam
🇳🇱 soverin	2026-06-05 15:07:24 (1 month ago)	spam	Email Spam
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇫🇮 notelseit	2026-05-24 18:07:20 (1 month ago)	2026-05-24T20:05:42.432104+02:00 mail postfix/smtpd[2411092]: NOQUEUE: reject: RCPT from unknown[185 ... show more 2026-05-24T20:05:42.432104+02:00 mail postfix/smtpd[2411092]: NOQUEUE: reject: RCPT from unknown[185.213.229.141]: 450 4.7.25 Client host rejected: cannot find your hostname, [185.213.229.141]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[185.213.229.141]> 2026-05-24T20:05:42.549530+02:00 mail postfix/smtpd[2411092]: lost connection after RCPT from unknown[185.213.229.141] 2026-05-24T20:07:19.736242+02:00 mail postfix/smtpd[2410902]: NOQUEUE: reject: RCPT from unknown[185.213.229.141]: 450 4.7.25 Client host rejected: cannot find your hostname, [185.213.229.141]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[185.213.229.141]> ... show less	Brute-Force Email Spam
🇬🇧 PeravixGroup	2026-05-09 03:46:20 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇬🇧 PeravixGroup	2026-05-07 19:30:00 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇨🇭 Origon	2026-04-22 04:02:46 (2 months ago)	NOQUEUE - IP: 185.213.229.141 - Apr 22 06:02:46 plesk postfix/smtpd[1568668]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.213.229.141 - Apr 22 06:02:46 plesk postfix/smtpd[1568668]: NOQUEUE: reject: RCPT from unknown[185.213.229.141]: 554 5.7.1 Service unavailable; Client host [185.213.229.141] blocked using dnsbl-2.uceprotect.net; Net 185.213.229.0/24 is UCEPROTECT-Level2 listed because 57 impacts are seen from UMS-AS, UZ/AS64466 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.213.229.141 / Net 185.213.228.0/22 is UCEPROTECT-Level2 listed because 109 impacts are seen from UMS-AS, UZ/AS64466 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.213.229.141; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.213.229.141]> show less	Email Spam
🇮🇹 VHosting	2026-04-16 04:23:26 (2 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇺🇸 TPI-Abuse	2026-04-01 08:49:30 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 185.213.229.141 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 185.213.229.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 04:49:26.531666 2026] [security2:error] [pid 17529:tid 17529] [client 185.213.229.141:9149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Horizon II/Thumbs.db"] [unique_id "aczcFi0A0NvtOCICAYwGoQAAABM"], referer: https://vitalitywebb.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Cloud86 B.V.	2026-03-30 11:00:12 (3 months ago)	categories: Email Spam	Email Spam
🇩🇪 jasperedv.de	2026-03-28 14:42:21 (3 months ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 141.11.62.236

🇧🇬 79.124.58.218

🇺🇸 43.159.149.216

🇺🇸 2607:f8b0:400e:c08::124

🇺🇸 195.184.76.241

🇰🇿 185.215.160.90

🇺🇦 185.25.118.108

🇮🇳 171.61.22.205

🇸🇬 114.119.150.37

🇮🇩 103.56.232.39

🇨🇿 95.129.101.177

🇷🇺 94.159.116.131

🇧🇩 74.80.104.227

🇫🇷 51.159.110.167

🇭🇰 47.76.99.34

🇺🇸 45.77.0.148

🇺🇸 3.142.170.60

🇬🇧 193.46.0.114

🇫🇮 147.185.133.121

🇮🇹 130.25.3.116