JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 124.109.44.238

124.109.44.238 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 24%: ?

24%

ISP	Nayatel (Pvt) Ltd
Usage Type	Fixed Line ISP
ASN	AS23674
Hostname(s)	mbl-109-44-238.dsl.net.pk
Domain Name	nayatel.com
Country	🇵🇰 Pakistan
City	Islamabad, Islamabad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 124.109.44.238

Whois 124.109.44.238

IP Abuse Reports for 124.109.44.238:

This IP address has been reported a total of 13 times from 9 distinct sources. 124.109.44.238 was first reported on January 17th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 gui-ying233	2026-08-26 20:01:30 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-26 11:41:15 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-25 15:31:09 (3 weeks ago)	(mod_security) mod_security (id:210350) triggered by 124.109.44.238 (mbl-109-44-238.dsl.net.pk): 1 i ... show more (mod_security) mod_security (id:210350) triggered by 124.109.44.238 (mbl-109-44-238.dsl.net.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:31:03.624559 2026] [security2:error] [pid 18240:tid 18240] [client 124.109.44.238:44200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|psychtraining.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "psychtraining.org"] [uri "/tools/adminer/adminer.php"] [unique_id "ao21N8yb5ADvBg6szN5IPAAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-25 11:58:04 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇨🇭 ALPHANET	2026-08-12 07:55:02 (1 month ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 kosada.com	2026-08-12 06:11:13 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-08-08 10:36:13 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack
🇩🇪 botreporter	2026-07-29 04:37:27 (1 month ago)	botnet ignoring robots.txt	Bad Web Bot
🇺🇸 kosada.com	2026-07-26 09:41:50 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-03 10:45:04 (2 months ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/sanus/shopby/manufacturer-apc-rcf-lsi-hyundai-sanus-xyz.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇺🇸 kosada.com	2026-06-29 15:16:24 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 jasperedv.de	2026-02-28 13:31:11 (6 months ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇮🇩 hermawan	2026-01-17 08:23:32 (8 months ago)	[Sat Jan 17 15:23:34.979576 2026] [security2:error] [pid 319420:tid 139937536964288] [client 124.109 ... show more [Sat Jan 17 15:23:34.979576 2026] [security2:error] [pid 319420:tid 139937536964288] [client 124.109.44.238:49158] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.22.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: 7% found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=476&id=1247%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-22-28-november-2016&start=170 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=476&id=1247%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-22-28-november-2016&start=17..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aWtHBsdxz9eS ... show less	Hacking Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.233.80.87

🇨🇭 213.55.229.222

🇳🇱 195.178.110.26

🇵🇰 182.181.212.121

🇻🇳 180.93.120.103

🇮🇳 110.235.239.58

🇹🇼 59.126.34.145

🇦🇺 45.133.4.44

🇮🇩 34.50.89.146

🇷🇴 2.57.122.168

🇬🇪 212.58.114.168

🇺🇾 190.133.105.124

🇺🇸 181.215.65.17

🇬🇭 80.87.83.229

🇳🇱 45.148.10.141

🇦🇷 190.189.90.177

🇨🇳 182.117.69.129

🇦🇷 181.168.46.20

🇻🇳 165.101.40.180

🇰🇷 140.238.3.21