JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.124.232.204

144.124.232.204 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 100%: ?

100%

ISP	Amsterdam, Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS216071
Domain Name	vdsina.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.124.232.204

Whois 144.124.232.204

IP Abuse Reports for 144.124.232.204:

This IP address has been reported a total of 68 times from 41 distinct sources. 144.124.232.204 was first reported on March 18th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-06 11:58:30 (1 day ago)	Blocked by UFW (TCP on 8083) Source port: 44552 TTL: 49 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8083) Source port: 44552 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 144.124.232.204) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 MatStef132	2026-07-05 13:19:59 (2 days ago)	MatShield L7: blocked on mathost.eu (ua-concentration-req-threshold)	Bad Web Bot
🇩🇪 NetWatch	2026-07-03 23:21:56 (3 days ago)	The IP 144.124.232.204 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇩🇪 dispaisyenterprises	2026-07-03 19:47:34 (3 days ago)	Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: root:tJ4w • Num ... show more Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: root:tJ4w • Number of login attempts: 1 • Client: SSH-2.0-AsyncSSH_2.23.0 Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇺🇸 SecondBanana	2026-07-03 00:21:38 (4 days ago)	2026-07-03T00:21:37.178986+00:00 thecount sshd[33392]: Connection closed by authenticating user root ... show more 2026-07-03T00:21:37.178986+00:00 thecount sshd[33392]: Connection closed by authenticating user root 144.124.232.204 port 46318 [preauth] ... show less	Brute-Force SSH
🇨🇿 lp	2026-07-03 00:18:43 (4 days ago)	SSH Brute force: 1 attempts were recorded from 144.124.232.204 2026-07-03T01:51:48+02:00 Connection ... show more SSH Brute force: 1 attempts were recorded from 144.124.232.204 2026-07-03T01:51:48+02:00 Connection closed by authenticating user root 144.124.232.204 port 36430 [preauth] show less	Brute-Force SSH
🇩🇪 F242	2026-07-02 21:03:30 (4 days ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 ArturShelby	2026-07-02 21:02:48 (4 days ago)	Honeypot triggered: /wp-json/wp/v2/users/	Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 20:26:36 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 144.124.232.204 (v613569.hosted-by-vdsina.com): ... show more (mod_security) mod_security (id:225170) triggered by 144.124.232.204 (v613569.hosted-by-vdsina.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:26:28.377904 2026] [security2:error] [pid 17911:tid 17911] [client 144.124.232.204:53180] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|islandsuperbook.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "islandsuperbook.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "akbJdOXG807zJIrVEUZ8nwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 19:35:59 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 144.124.232.204 (v613569.hosted-by-vdsina.com): ... show more (mod_security) mod_security (id:225170) triggered by 144.124.232.204 (v613569.hosted-by-vdsina.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 15:35:52.594822 2026] [security2:error] [pid 32338:tid 32338] [client 144.124.232.204:40012] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|chefmarcelcooks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chefmarcelcooks.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aka9mAhnEUBHyIlgqTbtCwAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-02 18:26:03 (5 days ago)	Wordfence waf block on lostswordfish	Web App Attack
🇸🇪 KIDOS	2026-07-02 02:28:53 (5 days ago)	malicious activity	Web App Attack
🇮🇩 sockominfo	2026-06-30 23:00:09 (6 days ago)	Zimbra: Login failures from malicious IP: 144.124.232.204. Threat Score: 6/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 144.124.232.204. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇫🇷 MatStef132	2026-06-29 23:18:29 (1 week ago)	MatShield L7: blocked on dev.mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-06-28 21:59:15 (1 week ago)	Auto-ban: >3000 req/min op 2026-06-28	Web App Attack SSH Hacking

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.125

🇳🇱 176.65.149.236

🇫🇮 147.185.133.8

🇩🇪 81.169.201.141

🇺🇸 73.36.177.174

🇨🇳 49.74.254.79

🇺🇸 44.244.155.21

🇺🇸 44.49.145.122

🇮🇳 20.235.127.11

🇮🇩 195.88.211.25

🇯🇵 160.251.140.254

🇫🇮 147.185.133.125

🇻🇳 125.212.235.194

🇧🇬 91.92.199.36

🇺🇸 44.192.230.232

🇳🇱 31.76.76.212

🇺🇸 195.184.76.136

🇮🇳 182.95.101.182

🇺🇿 89.126.211.166

🇳🇱 45.148.10.141