JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.213.230.162

185.213.230.162 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 41%: ?

41%

ISP	UNIVERSAL MOBILE SYSTEMS LLC
Usage Type	Mobile ISP
ASN	AS64466
Domain Name	mobi.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.213.230.162

Whois 185.213.230.162

IP Abuse Reports for 185.213.230.162:

This IP address has been reported a total of 49 times from 26 distinct sources. 185.213.230.162 was first reported on September 3rd 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 AEITS	2026-10-15 17:16:58 (1 day ago)	Fail2Ban	Port Scan
🇮🇱 auth.ink	2026-10-12 05:53:54 (5 days ago)	Malicious activity detected	Port Scan Brute-Force Hacking
🇫🇷 Petre 21_ip	2026-10-11 08:40:26 (6 days ago)	2026-10-11T10:40:25.712628+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-10-11T10:40:25.712628+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=185.213.230.162 DST=155.133.26.57 LEN=60 TOS=0x18 PREC=0x40 TTL=115 ID=16061 DF PROTO=TCP SPT=23457 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-10-03 08:55:19 (2 weeks ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-10-02 16:55:50 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 185.213.230.162 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 185.213.230.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 12:55:44.161841 2026] [security2:error] [pid 28354:tid 28354] [client 185.213.230.162:59572] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|philcarta.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "philcarta.com"] [uri "/"] [unique_id "ar_iEBapMQkr-qY-hgZiWwAAABQ"], referer: https://directorylinks.website/dir/trusted-backlink-services-161593 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 04:56:34 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-23 10:55:59 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 09:58:16 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 15:20:45 (4 weeks ago)	(mod_security) mod_security (id:210350) triggered by 185.213.230.162 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 185.213.230.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 11:20:37.641067 2026] [security2:error] [pid 13204:tid 13204] [client 185.213.230.162:10964] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|emelecsrl.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "emelecsrl.com"] [uri "/"] [unique_id "aqwFRS5eSZKeqDxDh77M_gAAAAc"], referer: https://checkwebsitedapa.online/dir/seo-ranking-links-64422 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-09-16 10:42:44 (1 month ago)	NOQUEUE - IP: 185.213.230.162 - Sep 16 12:42:44 plesk postfix/smtpd[4049288]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 185.213.230.162 - Sep 16 12:42:44 plesk postfix/smtpd[4049288]: NOQUEUE: reject: RCPT from unknown[185.213.230.162]: 554 5.7.1 Service unavailable; Client host [185.213.230.162] blocked using dnsbl-2.uceprotect.net; Net 185.213.228.0/22 is UCEPROTECT-Level2 listed because 258 impacts are seen from UMS-AS, UZ/AS64466 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.213.230.162 / Net 185.213.230.0/24 is UCEPROTECT-Level2 listed because 122 impacts are seen from UMS-AS, UZ/AS64466 there. See: http://www.uceprotect.net/rblcheck.php?ipr=185.213.230.162; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[185.213.230.162]> show less	Email Spam
🇫🇷 LRob	2026-09-09 00:46:00 (1 month ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /blog \| 2026-09-09 00:46 UTC show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-26 21:06:43 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-25 11:34:35 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-08-22 13:12:00 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 soverin	2026-08-20 16:46:05 (1 month ago)	spam	Email Spam

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.90.234.22

🇺🇸 20.40.233.138

🇨🇳 1.15.14.29

🇫🇮 209.85.167.49

🇮🇶 185.158.22.150

🇨🇳 180.106.80.16

🇸🇬 146.190.90.158

🇺🇸 139.100.128.132

🇩🇪 130.12.180.32

🇸🇬 129.212.236.172

🇸🇬 107.155.56.47

🇺🇸 104.168.145.238

🇺🇸 20.65.219.183

🇰🇷 183.101.53.155

🇵🇱 176.53.159.198

🇮🇳 175.101.33.21

🇺🇸 162.216.150.171

🇺🇸 150.107.36.236

🇺🇸 147.185.132.253

🇰🇷 112.184.13.56