JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.124.192.225

144.124.192.225 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 84%: ?

84%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.124.192.225

Whois 144.124.192.225

IP Abuse Reports for 144.124.192.225:

This IP address has been reported a total of 64 times from 34 distinct sources. 144.124.192.225 was first reported on February 24th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 14:07:05 (14 hours ago)	(mod_security) mod_security (id:210350) triggered by 144.124.192.225 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 144.124.192.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:06:57.091224 2026] [security2:error] [pid 27862:tid 27862] [client 144.124.192.225:57612] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|seebeexee.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seebeexee.com"] [uri "/"] [unique_id "aqqigS7uzLLNjoCafgvbYQAAAAI"], referer: https://dapadomainchecker.shop/dir/high-dr-backlinks-185269 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 07:14:52 (21 hours ago)	(mod_security) mod_security (id:210350) triggered by 144.124.192.225 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 144.124.192.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:14:44.905837 2026] [security2:error] [pid 4825:tid 4825] [client 144.124.192.225:52624] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|alphacom.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alphacom.us"] [uri "/"] [unique_id "aqpB5ONai9uw2YBdDWoLXQAAABY"], referer: https://five.co.in/redirect.php?ref_host=krasniqi-bau.eu show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Admins@FBN	2026-09-16 01:15:34 (1 day ago)	FW-PortScan: Traffic Blocked srcport=62967 dstport=23	Port Scan
Anonymous	2026-09-15 13:04:27 (1 day ago)	PORT & IP Scan.	Port Scan Brute-Force
🇩🇪 zerodaysystemde	2026-09-15 05:59:11 (1 day ago)	Port (22 tcp) Scanner - SSH - HoneyPot	Port Scan SSH
🇺🇸 MPL	2026-09-14 15:18:27 (2 days ago)	tcp ports: 22,23 (8 or more attempts)	Port Scan
🇧🇷 noconex	2026-09-12 12:46:04 (4 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 144.124.19 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 144.124.192.225 show less	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-09-10 22:27:01 (6 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 MPL	2026-09-10 09:11:44 (6 days ago)	tcp/22 (2 or more attempts)	Port Scan
🇺🇸 gui-ying233	2026-09-08 22:48:48 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 10:14:16 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_edition%3A505&f%5B1%5D=digest_key_terms%3A523&f%5B2%5D=digest_key_terms%3A532&field_article_edition%5B504%5D=504&field_key_terms%5B358%5D=358 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇫🇷 security.rdmc.fr	2026-09-07 09:56:08 (1 week ago)	Port Scan Attack proto:TCP src:34675 dst:23	Port Scan
🇺🇸 gui-ying233	2026-09-04 09:27:49 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 NetVexor	2026-09-03 01:22:26 (2 weeks ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇺🇸 gui-ying233	2026-09-02 09:03:17 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.204

🇦🇷 190.230.157.24

🇧🇷 190.115.84.25

🇺🇸 162.216.150.202

🇨🇦 143.110.222.168

🇺🇸 143.42.1.53

🇰🇷 115.68.208.117

🇺🇸 97.241.162.117

🇳🇱 87.239.13.42

🇵🇱 82.23.119.39

🇩🇪 69.5.169.248

🇺🇸 64.62.197.139

🇺🇸 64.62.197.100

🇺🇸 64.62.156.122

🇺🇸 64.62.156.90

🇳🇱 45.138.12.28

🇮🇩 34.50.98.224

🇺🇸 3.227.188.72

🇨🇳 218.107.47.230

🇨🇱 186.107.80.243