JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.124.199.229

144.124.199.229 was found in our database!

This IP was reported 84 times. Confidence of Abuse is 89%: ?

89%

ISP	Uzbektelekom Joint Stock Company
Usage Type	Fixed Line ISP
ASN	AS8193
Domain Name	bkm.uz
Country	🇺🇿 Uzbekistan
City	Tashkent, Tashkent

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.124.199.229

Whois 144.124.199.229

IP Abuse Reports for 144.124.199.229:

This IP address has been reported a total of 84 times from 57 distinct sources. 144.124.199.229 was first reported on March 2nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-08-30 06:33:05 (2 days ago)	SSH break in attempt ...	SSH
🇺🇸 gui-ying233	2026-08-29 11:36:55 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇵🇱 bart@	2026-08-27 15:01:03 (4 days ago)	Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honey ... show more Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp show less	Port Scan
🇩🇪 Admins@FBN	2026-08-27 09:58:16 (5 days ago)	FW-PortScan: Traffic Blocked srcport=56019 dstport=23	Port Scan
🇫🇷 security.rdmc.fr	2026-08-27 09:14:54 (5 days ago)	Port Scan Attack proto:TCP src:9750 dst:23	Port Scan
🇺🇸 NetVexor	2026-08-27 03:43:44 (5 days ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇺🇸 kosada.com	2026-08-26 17:25:25 (5 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-08-25 13:11:59 (6 days ago)	denied traffic to a honeypot network. destination port 13266.	Port Scan Hacking
🇺🇸 gui-ying233	2026-08-24 09:13:28 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇩🇪 inlink.ltd	2026-08-23 15:37:27 (1 week ago)	Known malicious PHP file or CMS probe	Web App Attack
🇩🇪 Vegascosmetics	2026-08-21 14:13:44 (1 week ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 67>=65, Abuse 64, NonEU, first-seen) show less	Hacking Exploited Host Web App Attack
🇫🇷 Zkillu	2026-08-20 16:23:25 (1 week ago)	DDoS flood attack against 82.152.54.0 (2026-08-20 16:18:25 -> 2026-08-20 16:33:25 UTC) targeting AS2 ... show more DDoS flood attack against 82.152.54.0 (2026-08-20 16:18:25 -> 2026-08-20 16:33:25 UTC) targeting AS215599. This IP (AS8193) sent ~5456 packets (7.75 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇺🇸 gui-ying233	2026-08-20 16:05:37 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-20 15:43:33 (1 week ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 15:38:33 -> 2026-08-20 15:53:33 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 15:38:33 -> 2026-08-20 15:53:33 UTC) targeting AS215599. This IP (AS8193) sent ~1310 packets (1.86 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2026-08-19 08:13:28 (1 week ago)	(mod_security) mod_security (id:218580) triggered by 144.124.199.229 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:218580) triggered by 144.124.199.229 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 04:13:21.315216 2026] [security2:error] [pid 30434:tid 30434] [client 144.124.199.229:5900] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:tid. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "76"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|www.powerkiteforum.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "aoVlod3wvK5poRfDW8NSTwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 84 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 171.217.70.151

🇩🇪 167.94.146.48

🇮🇳 117.247.17.88

🇺🇸 107.175.227.45

🇹🇷 88.230.134.59

🇺🇸 34.23.165.86

🇺🇸 216.180.246.210

🇺🇸 209.38.131.150

🇳🇱 193.47.62.69

🇨🇴 190.1.238.229

🇲🇽 189.189.67.249

🇨🇳 112.232.252.106

🇨🇳 112.66.185.99

🇹🇼 111.70.2.191

🇷🇺 109.198.192.194

🇸🇬 104.28.222.46

🇫🇷 91.231.89.106

🇸🇬 74.114.31.155

🇺🇦 46.8.62.27

🇨🇭 34.65.80.136