JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.124.196.97

144.124.196.97 was found in our database!

This IP was reported 81 times. Confidence of Abuse is 83%: ?

83%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.124.196.97

Whois 144.124.196.97

IP Abuse Reports for 144.124.196.97:

This IP address has been reported a total of 81 times from 53 distinct sources. 144.124.196.97 was first reported on February 13th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 saamkuu	2026-10-13 05:47:20 (4 days ago)	DDoS botnet: TCP connection flood, 6 connections to port 443.	DDoS Attack
🇦🇺 FireGuard Server	2026-10-12 15:35:10 (5 days ago)	Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=80	Port Scan Hacking
🇩🇪 Packets-Decreaser.NET	2026-10-11 01:23:23 (6 days ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇲🇹 Malta	2026-10-10 03:30:42 (1 week ago)	144.124.196.97 - - [10/Oct/2026:05:30:42 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Lin ... show more 144.124.196.97 - - [10/Oct/2026:05:30:42 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-10-09 12:00:52 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 144.124.196.97 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 144.124.196.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 08:00:46.617433 2026] [security2:error] [pid 10348:tid 10354] [client 144.124.196.97:40266] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|conservativelabor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "conservativelabor.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asjXbuy8ILf0wkCwA-C3ZAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-09 09:29:01 (1 week ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 144.124.196.97 (UZ/Uzbekistan/-): 1 in the la ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 144.124.196.97 (UZ/Uzbekistan/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 Packets-Decreaser.NET	2026-10-07 06:33:48 (1 week ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇩🇪 jbcrn	2026-10-06 04:34:55 (1 week ago)	Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. ... show more Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /blog/deflagration.abhiseka/presentialness/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-05 13:26:14 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 144.124.196.97 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 144.124.196.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 09:26:06.903639 2026] [security2:error] [pid 21433:tid 21433] [client 144.124.196.97:39964] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|naturalunfinishedfurniture.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "naturalunfinishedfurniture.com"] [uri "/"] [unique_id "asOlbpxbHDEfRxP-E6axyAAAAAo"], referer: https://seocompetitor.store/dir/website-ranking-links-145674 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-03 16:54:00 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 144.124.196.97 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 144.124.196.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 12:53:55.827436 2026] [security2:error] [pid 7639:tid 7639] [client 144.124.196.97:23149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|agirlwithaguitar.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agirlwithaguitar.com"] [uri "/"] [unique_id "asEzIyZoopbaUJ7TlJVsdQAAAAM"], referer: https://makeseobacklinks.shop/dir/seo-backlink-services-3901 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NetVexor	2026-10-03 09:38:33 (2 weeks ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇺🇸 RAP	2026-10-02 14:49:28 (2 weeks ago)	2026-10-02 14:49:28 UTC Unauthorized activity to TCP port 22. SSH	SSH
Anonymous	2026-10-01 11:33:31 (2 weeks ago)	2026-10-01T11:33:08.395216+00:00 UnitedStates1 sshd-session[469602]: Connection closed by 144.124.19 ... show more 2026-10-01T11:33:08.395216+00:00 UnitedStates1 sshd-session[469602]: Connection closed by 144.124.196.97 port 16361 [preauth] 2026-10-01T11:33:30.968361+00:00 UnitedStates1 sshd-session[470813]: Connection closed by 144.124.196.97 port 45009 [preauth] ... show less	Brute-Force SSH
🇩🇪 LRob	2026-09-27 06:48:07 (2 weeks ago)	This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated ... show more This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no browser is behind them. Each participating address sends only one or two such requests, but we count them by the million: a botnet, compromised devices, or abused proxies. The address is blocked. An investigation into what exactly sends these requests from your network (malware, an open proxy, a rented device) would help stop the attack at its source. \| path: /111-bons-plan-vtt \| query: order=product.name.asc&q=Taille-M/Famille-Overvolt-Spicy-ALLTRAIL \| 2026-09-27 06:48 UTC show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-09-24 12:38:58 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot

Showing 1 to 15 of 81 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.122

🇺🇸 185.180.141.108

🇲🇾 180.74.3.238

🇺🇸 162.216.150.12

🇨🇳 115.191.27.139

🇨🇳 106.12.182.44

🇳🇬 102.90.162.234

🇸🇪 83.251.102.189

🇫🇷 62.84.187.215

🇧🇪 34.62.189.80

🇻🇳 14.161.49.196

🇮🇩 202.10.45.207

🇲🇽 189.139.246.23

🇦🇷 186.12.190.64

🇫🇷 161.97.108.170

🇮🇳 122.184.78.199

🇨🇳 120.239.31.110

🇮🇳 103.248.120.6

🇳🇬 102.90.162.233

🇨🇦 34.47.51.141