JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

144.124.192.27

Recent Activity

Abuse confidence score ?

71% Elevated

88 reports

52 reporters · latest 2 days ago

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 144.124.192.27

Export CSV

This IP address has been reported a total of 88 times from 52 distinct sources. 144.124.192.27 was first reported on February 21st 2026, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: United States of America with 21 reports; Germany with 6 reports; Austria with 1 report. The most common categories in these recent reports were: Bad Web Bot 17 times; Port Scan 15 times; Brute-Force 9 times; Hacking 7 times; Web App Attack 6 times; Other 10 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 NetVexor	2026-10-06 08:33:11 (2 days ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-10-05 07:46:16 (3 days ago)	(mod_security) mod_security (id:212280) triggered by 144.124.192.27 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:212280) triggered by 144.124.192.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 03:46:11.407670 2026] [security2:error] [pid 13005:tid 13005] [client 144.124.192.27:28931] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<i?frame" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "44"] [id "212280"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.verdeprofundo.net\|F\|2"] [data "Matched Data: <iframe found within REQUEST_URI: /ponencias-sobre-pesca-maritima-recreativa/ismaref_2018_rangel/\\x22>ismaref_2018_rangel</a></blockquote><iframe"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.verdeprofundo.net"] [uri "/ponencias-sobre-pesca-maritima-recreativa/ismaref_2018_rangel/">ISMAREF_2018_Rangel&lt/a>&lt/blockquote><iframe"] [unique_id "asNVw9IdiCVAVAuqlwNLrwAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-04 05:17:31 (4 days ago)	(mod_security) mod_security (id:210350) triggered by 144.124.192.27 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 144.124.192.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 01:17:25.442387 2026] [security2:error] [pid 27914:tid 27914] [client 144.124.192.27:39609] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|maxkerrigan.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "maxkerrigan.com"] [uri "/"] [unique_id "asHhZYTiG3Bvbf4VPJ3HEwAAAA4"], referer: https://seocompetitorbacklink.shop/dir/seo-growth-backlinks-132326 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-10-03 22:58:01 (4 days ago)	tcp ports: 23,22 (6 or more attempts)	Port Scan
🇺🇸 MPL	2026-10-03 22:58:01 (4 days ago)	tcp ports: 23,22 (12 or more attempts)	Port Scan
🇩🇪 LRob	2026-10-02 03:47:28 (6 days ago)	Shop search flood (L7 DDoS) \| path: /97-vtc-all-road-electrique \| query: q=Taille-S/Famille-E%5C-Exp ... show more Shop search flood (L7 DDoS) \| path: /97-vtc-all-road-electrique \| query: q=Taille-S/Famille-E%5C-Explorer-Yucatan \| src_port: 52573 show less	DDoS Attack Web App Attack
🇨🇦 Tanados	2026-09-28 15:43:56 (1 week ago)	Blocked by UFW [22/tcp] Source port: 29997 TTL: 44 Packet length: 60 TOS: 0x00 This report was gene ... show more Blocked by UFW [22/tcp] Source port: 29997 TTL: 44 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH
🇮🇹 A000Z	2026-09-24 01:04:29 (2 weeks ago)	Fail2Ban: 144.124.192.27 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 144.124.192.27 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 09:03:39 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇩🇪 Admins@Storch	2026-09-20 23:48:29 (2 weeks ago)	IPS:drop <match> dstport=23	Brute-Force Exploited Host
🇺🇸 鬼影233	2026-09-20 09:26:01 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-18 12:03:29 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 144.124.192.27 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 144.124.192.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 08:03:24.755805 2026] [security2:error] [pid 15763:tid 15763] [client 144.124.192.27:21192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|csm-dtc.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "csm-dtc.com"] [uri "/"] [unique_id "aq0ojGedxDeDGr2dbFLa2AAAAB0"], referer: https://backlinkschecker.store/dir/backlinks-for-search-ranking-48048 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 mikkopal88	2026-09-16 10:10:23 (3 weeks ago)	Telnet probe or brute-force attempt	Port Scan Brute-Force
🇺🇸 thefuzz4	2026-09-16 09:16:04 (3 weeks ago)	SSH tarpit (endlessh): 2 unsolicited connection(s) to port 22. Automated report.	Brute-Force SSH
🇫🇷 security.rdmc.fr	2026-09-16 07:07:24 (3 weeks ago)	Port Scan Attack proto:TCP src:21676 dst:23	Port Scan

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.240.117.200

🇮🇳 122.187.229.168

🇨🇳 119.97.184.93

🇳🇱 109.160.32.153

🇫🇷 91.231.89.222

🇳🇱 81.19.216.112

🇺🇸 74.7.229.199

🇬🇧 35.203.210.51

🇨🇳 14.29.170.54

🇩🇪 213.209.159.231

🇧🇷 177.74.210.244

🇳🇱 172.71.183.35

🇮🇳 168.144.158.239

🇧🇷 167.249.240.124

🇮🇳 159.89.170.48

🇦🇺 103.208.219.38

🇫🇷 85.217.140.29

🇧🇬 79.124.62.230

🇺🇸 66.132.224.89

🇬🇧 5.226.140.45