JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.214.211.121

95.214.211.121 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 34%: ?

34%

ISP	UNITEL LLC
Usage Type	Mobile ISP
ASN	AS41202
Domain Name	beeline.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.214.211.121

Whois 95.214.211.121

IP Abuse Reports for 95.214.211.121:

This IP address has been reported a total of 22 times from 20 distinct sources. 95.214.211.121 was first reported on August 22nd 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Viveronese	2026-07-30 11:55:46 (13 hours ago)	SASL LOGIN authentication failed	Brute-Force
🇫🇮 notelseit	2026-07-30 10:27:44 (14 hours ago)	2026-07-30T12:27:16.213300+02:00 mail postfix/smtpd[1227452]: NOQUEUE: reject: RCPT from unknown[95. ... show more 2026-07-30T12:27:16.213300+02:00 mail postfix/smtpd[1227452]: NOQUEUE: reject: RCPT from unknown[95.214.211.121]: 450 4.7.25 Client host rejected: cannot find your hostname, [95.214.211.121]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[95.214.211.57]> 2026-07-30T12:27:16.336524+02:00 mail postfix/smtpd[1227452]: lost connection after RCPT from unknown[95.214.211.121] 2026-07-30T12:27:43.488663+02:00 mail postfix/smtpd[1227452]: NOQUEUE: reject: RCPT from unknown[95.214.211.121]: 450 4.7.25 Client host rejected: cannot find your hostname, [95.214.211.121]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[95.214.211.57]> ... show less	Brute-Force Email Spam
🇨🇭 Origon	2026-07-29 17:04:16 (1 day ago)	NOQUEUE - IP: 95.214.211.121 - Jul 29 19:04:16 plesk postfix/smtpd[2740702]: NOQUEUE: reject: RCPT ... show more NOQUEUE - IP: 95.214.211.121 - Jul 29 19:04:16 plesk postfix/smtpd[2740702]: NOQUEUE: reject: RCPT from unknown[95.214.211.121]: 554 5.7.1 Service unavailable; Client host [95.214.211.121] blocked using dnsbl-2.uceprotect.net; Net 95.214.208.0/22 is UCEPROTECT-Level2 listed because 177 impacts are seen from UNITEL, UZ/AS41202 there. See: http://www.uceprotect.net/rblcheck.php?ipr=95.214.211.121 / Net 95.214.211.0/24 is UCEPROTECT-Level2 listed because 82 impacts are seen from UNITEL, UZ/AS41202 there. See: http://www.uceprotect.net/rblcheck.php?ipr=95.214.211.121; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<[95.214.211.121]> show less	Email Spam
🇺🇸 kosada.com	2026-07-06 20:13:32 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 stechusa	2026-07-03 15:08:53 (3 weeks ago)	[Askari] \| country=UZ \| ASN=UNITEL LLC	Bad Web Bot DDoS Attack
🇳🇱 soverin	2026-06-26 05:05:03 (1 month ago)	spam	Email Spam
🇳🇱 soverin	2026-06-05 15:25:34 (1 month ago)	spam	Email Spam
Anonymous	2026-05-11 00:00:00 (2 months ago)	"Security violation, excess traffic against library/education infrastructure"	Brute-Force
🇨🇦 Tanados	2026-04-24 02:29:48 (3 months ago)	Blocked by UFW [17000/tcp] Source port: 62688 TTL: 44 Packet length: 60 TOS: 0x00 This report was g ... show more Blocked by UFW [17000/tcp] Source port: 62688 TTL: 44 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-19 16:34:10 (3 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-04-08 18:56:22 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 95.214.211.121 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 95.214.211.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 14:56:19.049216 2026] [security2:error] [pid 219149:tid 219149] [client 95.214.211.121:44988] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aaabft.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aaabft.com"] [uri "/[email protected]"] [unique_id "adak03BSCq4kzA7WfEMMIQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Cloud86 B.V.	2026-03-29 13:13:10 (4 months ago)	categories: Email Spam	Email Spam
🇳🇱 Savvii	2026-03-24 19:24:40 (4 months ago)	20 attempts against mh-misbehave-ban on plum	Brute-Force Bad Web Bot Web App Attack
🇺🇸 SiliSoftware	2026-02-04 09:21:27 (5 months ago)	/phpBB3/posting.php?mode=reply&f=3&t=528&sid=bf7362a100e7400ac13cc33b034111c9	Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 20:55:56 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 95.214.211.121 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 95.214.211.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 15:55:52.470745 2026] [security2:error] [pid 23126:tid 23126] [client 95.214.211.121:7019] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|specialtywebservice.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "specialtywebservice.com"] [uri "/bestlaundryservices.com"] [unique_id "aWv3WFPuomNMrw44_dt1pQAAABQ"], referer: http://specialtywebservice.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 79.124.62.230

🇰🇷 222.110.147.56

🇺🇸 185.180.141.39

🇳🇱 185.93.89.167

🇺🇸 162.241.235.142

🇨🇳 123.207.200.188

🇺🇸 109.105.210.69

🇳🇱 88.218.121.220

🇫🇷 85.217.140.15

🇸🇬 47.237.72.78

🇸🇬 47.236.96.46

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇨🇳 36.140.148.41

🇬🇧 35.203.210.127

🇨🇴 181.63.25.162

🇯🇵 165.154.241.28

🇹🇭 165.154.232.165

🇺🇸 162.216.150.74

🇨🇳 120.48.12.219