JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.224.242.249

109.224.242.249 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 32%: ?

32%

ISP	High Speed For Internet Services L.L.C
Usage Type	Fixed Line ISP
ASN	AS216472
Domain Name	highspeed-sy.com
Country	🇸🇾 Syrian Arab Republic
City	Ad Dana, Idlib

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.224.242.249

Whois 109.224.242.249

IP Abuse Reports for 109.224.242.249:

This IP address has been reported a total of 34 times from 21 distinct sources. 109.224.242.249 was first reported on December 7th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-12 16:31:12 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 109.224.242.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 109.224.242.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:31:08.410159 2026] [security2:error] [pid 30680:tid 30680] [client 109.224.242.249:34406] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lusineweb.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lusineweb.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as0LTJ6qX1bakIDJBkjZlAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-10-12 07:24:03 (3 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[51]=5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[51]=51&topics[52]=37&topics[53]=25&topics[54]=49 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-10-12 02:03:02 (3 weeks ago)	block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB	Bad Web Bot
🇫🇷 security.rdmc.fr	2026-10-11 21:33:39 (3 weeks ago)	Port Scan Attack proto:TCP src:60740 dst:23	Port Scan
🇺🇸 鬼影233	2026-10-11 07:45:03 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
Anonymous	2026-10-10 17:20:54 (3 weeks ago)	denied traffic to a honeypot network. destination port 22.	Port Scan Hacking
🇺🇸 鬼影233	2026-10-01 12:23:20 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 bmino.pl	2026-09-27 23:57:28 (1 month ago)	Autoban IP(2): 109.224.242.249 - Hostname: High Speed For Internet Services L.L.C - City: Reyhanlı - ... show more Autoban IP(2): 109.224.242.249 - Hostname: High Speed For Internet Services L.L.C - City: Reyhanlı - Country: Türkiye - Organization: High Speed Telekomunikasyon ve Hab. Hiz. Ltd. Sti - Reason: GET /?c=hxxd247qqk35589jpueiz HTTP/1.1 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-27 10:50:01 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 109.224.242.249 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 109.224.242.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 06:49:58.461013 2026] [security2:error] [pid 29363:tid 29363] [client 109.224.242.249:48824] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.bigholegolf.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bigholegolf.com"] [uri "/"] [unique_id "arj01gKEREa-ISid_0pumgAAAAI"], referer: https://bulkbacklinkanalyzer.online/dir/backlinks-for-google-ranking-98546 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-26 14:39:46 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 18:24:31 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 12:19:42 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 07:48:15 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 pltcldvlpr	2026-06-08 10:58:48 (4 months ago)	Bogus Useragent: 109.224.242.249 - - [08/Jun/2026:12:58:48 +0200] "GET /protocol?id=hh_22_36&paragra ... show more Bogus Useragent: 109.224.242.249 - - [08/Jun/2026:12:58:48 +0200] "GET /protocol?id=hh_22_36&paragraph=6486729&seq=417 HTTP/1.1" 444 0 "-" "Opera/9.24.(X11; Linux i686; nso-ZA) Presto/2.9.162 Version/12.00" asn=216472 org="High Speed For Internet Services L.L.C" country=TR ... show less	Bad Web Bot
🇫🇷 security.rdmc.fr	2026-05-29 16:40:25 (5 months ago)	Port Scan Attack proto:TCP src:6279 dst:23	Port Scan

« Previous
Next »

Showing 1 to 15 of 34 results

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 118.70.182.193

🇬🇧 35.203.211.166

🇳🇱 193.47.62.69

🇩🇪 185.125.50.192

🇮🇹 185.30.45.177

🇧🇷 179.124.190.70

🇳🇱 109.160.32.35

🇬🇷 77.69.44.136

🇺🇸 47.200.194.59

🇳🇱 45.148.10.157

🇸🇬 34.142.170.10

🇺🇸 216.73.216.76

🇰🇷 210.126.94.78

🇨🇦 209.239.15.142

🇨🇦 158.69.112.222

🇵🇰 149.40.247.242

🇮🇩 139.255.254.163

🇨🇳 113.24.225.151

🇭🇰 108.165.147.214

🇷🇴 92.118.39.77