JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.109.44.238

124.109.44.238 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 34%: ?

34%

ISP	Nayatel (Pvt) Ltd
Usage Type	Fixed Line ISP
ASN	AS23674
Hostname(s)	mbl-109-44-238.dsl.net.pk
Domain Name	nayatel.com
Country	🇵🇰 Pakistan
City	Islamabad, Islamabad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.109.44.238

Whois 124.109.44.238

IP Abuse Reports for 124.109.44.238:

This IP address has been reported a total of 11 times from 8 distinct sources. 124.109.44.238 was first reported on January 17th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-25 15:31:09 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 124.109.44.238 (mbl-109-44-238.dsl.net.pk): 1 i ... show more (mod_security) mod_security (id:210350) triggered by 124.109.44.238 (mbl-109-44-238.dsl.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:31:03.624559 2026] [security2:error] [pid 18240:tid 18240] [client 124.109.44.238:44200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|psychtraining.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "psychtraining.org"] [uri "/tools/adminer/adminer.php"] [unique_id "ao21N8yb5ADvBg6szN5IPAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-25 11:58:04 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 ALPHANET	2026-08-12 07:55:02 (2 weeks ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-12 06:11:13 (2 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-08 10:36:13 (2 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇩🇪 botreporter	2026-07-29 04:37:27 (4 weeks ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 kosada.com	2026-07-26 09:41:50 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-03 10:45:04 (1 month ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/sanus/shopby/manufacturer-apc-rcf-lsi-hyundai-sanus-xyz.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-06-29 15:16:24 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 jasperedv.de	2026-02-28 13:31:11 (5 months ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇮🇩 hermawan	2026-01-17 08:23:32 (7 months ago)	[Sat Jan 17 15:23:34.979576 2026] [security2:error] [pid 319420:tid 139937536964288] [client 124.109 ... show more [Sat Jan 17 15:23:34.979576 2026] [security2:error] [pid 319420:tid 139937536964288] [client 124.109.44.238:49158] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=476&id=1247%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-22-28-november-2016&start=170 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=1247%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-22-28-november-2016&start=17..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aWtHBsdxz9eS ... show less	Hacking Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 209.38.121.136

🇺🇸 172.105.147.48

🇹🇼 128.1.32.99

🇺🇸 98.26.197.94

🇫🇷 91.231.89.13

🇧🇬 79.124.62.134

🇺🇸 66.132.195.71

🇳🇱 45.148.10.157

🇵🇱 23.230.91.248

🇮🇩 210.79.142.201

🇧🇪 198.235.24.235

🇨🇱 179.60.67.237

🇩🇪 152.53.148.66

🇨🇦 99.249.143.67

🇨🇦 99.226.211.13

🇬🇧 45.82.76.117

🇬🇭 41.211.16.169

🇺🇸 34.73.128.17

🇦🇺 34.40.240.124

🇧🇪 34.14.122.221