JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.124.199.202

144.124.199.202 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 94%: ?

94%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.124.199.202

Whois 144.124.199.202

IP Abuse Reports for 144.124.199.202:

This IP address has been reported a total of 69 times from 43 distinct sources. 144.124.199.202 was first reported on March 11th 2026, and the most recent report was 56 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 Sec-Dmn	2026-09-19 00:20:03 (56 minutes ago)	SSH Brute-Force detected by infrastructure gateway.	Brute-Force SSH
🇵🇱 mkey	2026-09-17 14:20:02 (1 day ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-09-17 16:16:23 \| LAST=2026-09-17 16:16:24. Last seen 2026-09-17 16:16:24. show less	Port Scan
🇫🇷 security.rdmc.fr	2026-09-16 04:22:15 (2 days ago)	Port Scan Attack proto:TCP src:35441 dst:23	Port Scan
🇳🇱 i-turnradio.nl	2026-09-16 03:34:10 (2 days ago)	2026-09-16 05:34:05 +02:00 - Unsolicited TCP connection to a honeypot port; probing port 23.	Port Scan
🇩🇪 Vegascosmetics	2026-09-15 18:02:47 (3 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 76>=65, Abuse 82, NonEU, first-seen, Change* path) show less	Hacking Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 16:24:17 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 144.124.199.202 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 144.124.199.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 12:24:13.701585 2026] [security2:error] [pid 27962:tid 27962] [client 144.124.199.202:62774] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|roguetechhub.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "roguetechhub.com"] [uri "/soggy-monthly-meeting-march-2018/"] [unique_id "aqlxLYUVW2LLF752C6_3TgAAAAY"], referer: https://savagefarmer.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 EGP Abuse Dept	2026-09-14 08:27:55 (4 days ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇺🇸 MPL	2026-09-13 13:38:27 (5 days ago)	tcp/23 (4 or more attempts)	Port Scan
🇺🇸 gui-ying233	2026-09-10 04:27:17 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-09-09 06:21:07 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Entalpi.net	2026-09-09 02:57:25 (1 week ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇫🇷 Sklurk	2026-09-09 02:51:43 (1 week ago)	Web App Attack	Web App Attack
🇦🇹 Pingger Shikkoken	2026-09-07 11:37:03 (1 week ago)	2026-09-07T11:37:03+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-09-07T11:37:03+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=144.124.199.202 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=3725 DF PROTO=TCP SPT=16644 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 2026-09-07T11:37:04+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=144.124.199.202 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=3726 DF PROTO=TCP SPT=16644 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 show less	Hacking Brute-Force SSH
🇺🇸 kosada.com	2026-09-07 08:58:10 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A348&f%5B1%5D=digest_key_terms%3A383&f%5B2%5D=digest_key_terms%3A517&field_article_edition%5B504%5D=504&field_key_terms%5B313%5D=313 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-05 09:59:06 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.104

🇬🇧 195.96.139.20

🇯🇵 92.112.53.28

🇸🇬 8.219.73.6

🇳🇱 213.177.179.80

🇰🇷 211.253.31.30

🇧🇷 205.210.31.228

🇰🇷 199.241.120.131

🇬🇧 193.176.29.7

🇨🇳 180.76.236.214

🇺🇸 174.173.219.12

🇳🇱 172.94.9.193

🇨🇲 143.105.152.54

🇨🇳 124.207.165.138

🇨🇳 112.30.127.9

🇺🇸 66.132.186.241

🇺🇸 66.132.186.222

🇵🇱 54.38.52.18

🇺🇸 20.115.50.247

🇩🇪 194.35.188.103