JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.124.199.193

144.124.199.193 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 44%: ?

44%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.124.199.193

Whois 144.124.199.193

IP Abuse Reports for 144.124.199.193:

This IP address has been reported a total of 27 times from 22 distinct sources. 144.124.199.193 was first reported on March 22nd 2026, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-10 12:51:14 (21 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-07 17:48:33 (3 days ago)	Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (E ... show more Attribution: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Aggressive search filter manipulation / web scraper probe on port 443 \| URI: Excessive filters used: /catalogsearch/result/?cat=43&mode=grid&projector_class=68&q=DVI+104+Tx%2FRx&rating=6&stock=1 \| UA: Mozilla/5.0 (Windows; U; Windows 95) AppleWebKit/532.9.5 (KHTML, like Gecko) Version/4.1 Safari/532.9.5 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 nodepile	2026-07-04 07:47:00 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/index/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇷🇺 Agrohim	2026-07-03 00:57:33 (1 week ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇺🇸 nodepile	2026-06-29 04:09:33 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='M ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/catalogsearch/result/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0') show less	Web App Attack Exploited Host
🇫🇷 Sklurk	2026-06-19 04:07:58 (3 weeks ago)	Web App Attack	Web App Attack
🇮🇩 hermawan	2026-05-29 10:45:13 (1 month ago)	1780051503.030737 144.124.199.193 103.166.156.58 64240_2-1-3-1-1-4_1436_8 2026-05-29 17:45:03 WIB .. ... show more 1780051503.030737 144.124.199.193 103.166.156.58 64240_2-1-3-1-1-4_1436_8 2026-05-29 17:45:03 WIB ... show less	Email Spam Hacking
🇩🇪 Vegascosmetics	2026-05-28 21:53:34 (1 month ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇩🇪 SMARTNET	2026-05-27 06:03:53 (1 month ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇺🇸 TPI-Abuse	2026-05-24 14:05:33 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 144.124.199.193 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 144.124.199.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 10:05:27.715293 2026] [security2:error] [pid 30642:tid 30642] [client 144.124.199.193:62100] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 144.124.199.193 (+1 hits since last alert)\|superzilla.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "superzilla.com"] [uri "/xmlrpc.php"] [unique_id "ahMFp2N8jWniR-rtB2PkyAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2026-05-24 14:05:09 (1 month ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 13:36:12 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 144.124.199.193 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 144.124.199.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 09:36:09.449115 2026] [security2:error] [pid 13752:tid 13752] [client 144.124.199.193:23678] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 144.124.199.193 (+1 hits since last alert)\|talkingmess.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "talkingmess.com"] [uri "/xmlrpc.php"] [unique_id "ahL-yeiLGzf1xrRLuSpy4AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-05-23 17:04:53 (1 month ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
Anonymous	2026-05-23 15:04:40 (1 month ago)	Attac	Brute-Force
🇺🇸 nodepile	2026-05-11 05:32:09 (2 months ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/media/catalog/product/cache/ddebc89b6d27929fece7153308b6a3fc/1/_/1_2422_311.jpg ua='Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.4444.1104 Safari/537.36') show less	Web App Attack Exploited Host

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 125.142.37.91

🇺🇸 65.49.1.54

🇺🇸 45.156.129.191

🇵🇦 191.98.196.7

🇮🇩 180.249.153.15

🇭🇰 165.154.40.97

🇨🇳 115.230.13.169

🇫🇷 91.231.89.216

🇩🇪 78.46.99.182

🇨🇳 58.18.80.18

🇬🇧 35.203.211.5

🇨🇳 202.105.98.252

🇵🇱 176.53.159.198

🇺🇸 154.83.197.225

🇩🇪 154.14.23.208

🇮🇳 139.59.36.109

🇵🇰 111.92.158.108

🇮🇳 103.123.53.88

🇧🇬 91.92.47.140

🇷🇺 83.246.133.16