JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.214.211.192

95.214.211.192 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 36%: ?

36%

ISP	UNITEL LLC
Usage Type	Mobile ISP
ASN	AS41202
Domain Name	beeline.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.214.211.192

Whois 95.214.211.192

IP Abuse Reports for 95.214.211.192:

This IP address has been reported a total of 41 times from 28 distinct sources. 95.214.211.192 was first reported on December 4th 2022, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 soverin	2026-06-26 16:54:05 (19 hours ago)	spam	Email Spam
🇺🇸 kosada.com	2026-06-25 19:51:45 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇳🇱 soverin	2026-06-23 09:34:08 (4 days ago)	spam	Email Spam
🇳🇱 soverin	2026-06-05 15:19:01 (3 weeks ago)	spam	Email Spam
🇩🇪 EGP Abuse Dept	2026-06-02 08:03:01 (3 weeks ago)	Numeric HELO: 95.214.211.192	Email Spam Exploited Host
🇫🇮 notelseit	2026-05-25 06:12:17 (1 month ago)	2026-05-25T08:09:56.526639+02:00 mail postfix/smtpd[2494949]: NOQUEUE: reject: RCPT from unknown[95. ... show more 2026-05-25T08:09:56.526639+02:00 mail postfix/smtpd[2494949]: NOQUEUE: reject: RCPT from unknown[95.214.211.192]: 450 4.7.25 Client host rejected: cannot find your hostname, [95.214.211.192]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[95.214.211.192]> 2026-05-25T08:09:56.637786+02:00 mail postfix/smtpd[2494949]: lost connection after RCPT from unknown[95.214.211.192] 2026-05-25T08:12:16.835204+02:00 mail postfix/smtpd[2496105]: NOQUEUE: reject: RCPT from unknown[95.214.211.192]: 450 4.7.25 Client host rejected: cannot find your hostname, [95.214.211.192]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[95.214.211.192]> ... show less	Brute-Force Email Spam
🇬🇧 PeravixGroup	2026-05-22 01:01:03 (1 month ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇷🇺 DZBOT	2026-05-18 07:00:47 (1 month ago)	DZBOT. Brute-force users SMTP	Brute-Force
🇬🇧 W & M Ltd	2026-05-15 13:52:19 (1 month ago)	Spam reported by OpenAI.	Email Spam
🇲🇳 Public CSIRT/CC of Mongolia	2026-05-12 13:07:13 (1 month ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET	Hacking IoT Targeted Port Scan
🇫🇮 danskefilm.dk	2026-05-08 05:55:01 (1 month ago)	Mail spam, spamassassin score over 20 points	Email Spam
🇨🇭 Origon	2026-05-03 22:50:34 (1 month ago)	NOQUEUE - IP: 95.214.211.192 - May 4 00:50:34 plesk postfix/smtpd[1781046]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 95.214.211.192 - May 4 00:50:34 plesk postfix/smtpd[1781046]: NOQUEUE: reject: RCPT from unknown[95.214.211.192]: 554 5.7.1 Service unavailable; Client host [95.214.211.192] blocked using dnsbl-1.uceprotect.net; IP 95.214.211.192 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=95.214.211.192; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[95.214.211.192]> show less	Email Spam
🇩🇪 kreativstrecke	2026-04-16 09:40:30 (2 months ago)	2026-04-16T10:40:29.578713+01:00 srv03 postfix/postscreen[1892443]: PREGREET 23 after 0.16 from [95. ... show more 2026-04-16T10:40:29.578713+01:00 srv03 postfix/postscreen[1892443]: PREGREET 23 after 0.16 from [95.214.211.192]:37937: EHLO [95.214.211.192]\r\n 2026-04-16T10:40:30.007550+01:00 srv03 postfix/postscreen[1892443]: NOQUEUE: reject: RCPT from [95.214.211.192]:37937: 550 5.7.1 Service unavailable; client [95.214.211.192] blocked using zen.spamhaus.org; from=<[email protected]>, to=<[email protected]>, proto=ESMTP, helo=<[95.214.211.192]> 2026-04-16T10:40:30.147022+01:00 srv03 postfix/postscreen[1892443]: HANGUP after 0.49 from [95.214.211.192]:37937 in tests after SMTP handshake ... show less	Brute-Force
🇫🇷 Sklurk	2026-04-07 01:22:54 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-03-31 14:40:09 (2 months ago)	(mod_security) mod_security (id:218580) triggered by 95.214.211.192 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:218580) triggered by 95.214.211.192 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 31 10:40:03.745710 2026] [security2:error] [pid 4882:tid 4882] [client 95.214.211.192:20844] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:id. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|listings.cruisingforsex.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "listings.cruisingforsex.com"] [uri "/printthread.php"] [unique_id "acvcw8r5E2EBv-kG-4AutgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400e:c09::12c

🇬🇧 185.247.137.130

🇺🇸 162.216.149.84

🇭🇰 150.5.154.160

🇮🇳 106.205.4.169

🇫🇷 85.217.140.40

🇩🇪 45.130.203.208

🇫🇷 172.71.135.30

🇪🇸 158.158.43.25

🇺🇸 149.142.103.219

🇻🇳 116.110.209.148

🇳🇱 91.92.40.12

🇺🇸 72.220.201.3

🇬🇧 64.137.93.150

🇧🇭 46.184.245.40

🇩🇪 45.130.203.224

🇮🇶 37.238.97.72

🇨🇳 218.0.56.78

🇺🇸 207.90.244.17

🇺🇸 162.216.149.49