JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.236.44.129

109.236.44.129 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 24%: ?

24%

ISP	Abissnet sh.a.
Usage Type	Fixed Line ISP
ASN	AS35047
Hostname(s)	dynamic.pool-109-236-44-129.abissnet.al
Domain Name	abissnet.al
Country	🇦🇱 Albania
City	Lapardha Nje, Berat County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.236.44.129

Whois 109.236.44.129

IP Abuse Reports for 109.236.44.129:

This IP address has been reported a total of 10 times from 8 distinct sources. 109.236.44.129 was first reported on October 16th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 mypatricks	2026-10-27 01:46:17 (1 hour ago)	109.236.44.129 \| Port: 11543 \| DNS: dynamic.pool-109-236-44-129.abissnet.al 2026-10-27T09:46:16+08:0 ... show more 109.236.44.129 \| Port: 11543 \| DNS: dynamic.pool-109-236-44-129.abissnet.al 2026-10-27T09:46:16+08:00 Europe/Tirane \| POOL Data Center/Web Hosting/Transit Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?1792479655&02bd0f0be9220fff9dd2e9=1255 \| Ref: - \| Country: AL/Albania/+01:00 IP City: Lapardha Një Windows a50e06ab6936f48c-MUC/Munich, Germany 1 hits/0 secs Browser 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇸🇬 mypatricks	2026-10-27 01:17:37 (2 hours ago)	109.236.44.129 \| Port: 12921 \| DNS: dynamic.pool-109-236-44-129.abissnet.al 2026-10-27T09:17:36+08:0 ... show more 109.236.44.129 \| Port: 12921 \| DNS: dynamic.pool-109-236-44-129.abissnet.al 2026-10-27T09:17:36+08:00 Europe/Tirane \| POOL Data Center/Web Hosting/Transit Spam list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /?1792786796&bffbcbbceddfb=1110 \| Ref: - \| Country: AL/Albania/+01:00 IP City: Lapardha Një Windows a50ddcab0f0b0221-ZRH/Zürich, Switzerland 1 hits/0 secs Browser 2 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host
🇮🇩 hermawan	2026-10-17 05:49:11 (1 week ago)	[Sat Oct 17 12:49:11.311627 2026] [security2:error] [pid 190640:tid 140148264101568] [client 109.236 ... show more [Sat Oct 17 12:49:11.311627 2026] [security2:error] [pid 190640:tid 140148264101568] [client 109.236.44.129:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Quark" at REQUEST_HEADERS:user-agent. [file "/etc/modsecurity/coreruleset-4.29.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "290"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Quark found within REQUEST_HEADERS:user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 QuarkPC/4.4.5.506 request_line = GET /pdfjs/web/viewer.html?file=/images/Klimatologi/Prakiraan/Peringatan_Dini/2026/03_Maret_2026/11-20/Press_Release_Kewaspadaan_Cuaca_Ekstrem_di_Jawa_Timur_11-20_MARET_2026_e_B_ME_02_04_014_KSUB_III_2026.pdf HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "atMMV8a_KsfHoP0TGPxQIwAAAI8"], referer https://www.google.go.id/ [staklim-jatim.bmkg.go.id] [s ... show less	Email Spam Hacking
🇷🇸 pavel Karpenko	2026-10-11 21:44:38 (2 weeks ago)	109.236.44.129 - - [12/Oct/2026:00:44:38 +0300] "GET /captcha-check.php?r=eyJ2IjoxLCJwYXRoIjoiL3RyYW ... show more 109.236.44.129 - - [12/Oct/2026:00:44:38 +0300] "GET /captcha-check.php?r=eyJ2IjoxLCJwYXRoIjoiL3RyYW5zZmVyLz9jb2RlPUVTJmNvbXBhbnk9Q0xPVURFVVMrU0wmY29tcGFueV9jb3VudHJ5PUVTJmNvdW50ZXJwYXJ0eT1BUklOJmNvdW50cnk9RVMmbGFuZz1mciZtb250aHM9NiZzY29wZT1pbnRlcnJpcl9pbiZzaGFyZT04NTYyZDk2MjVkNjQ4NzJjJnZpZXc9cGFpciIsInZpc2l0b3IiOiJjNGE2MTBkY2IzZWFkOWI0ZjYzM2M2N2RkOGNkNmFhZCIsImV4cCI6MTc5MTc1NTY3N30.iUzREKORbkV19SVubX6gc9SnyFXr-DYitGCPOgLxOi4 HTTP/2.0" 403 77 "https://ultralir.com/transfer/?code=ES&company=CLOUDEUS+SL&company_country=ES&counterparty=ARIN&country=ES&lang=fr&months=6&scope=interrir_in&share=8562d9625d64872c&view=pair" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0" client_port=41164 server_port=443 rt=0.001 urt=0.001 transfer_entry=- server_addr=195.133.18.6 epoch=1791755078.298 show less	DDoS Attack
🇺🇸 TPI-Abuse	2026-09-28 16:59:17 (4 weeks ago)	(mod_security) mod_security (id:210350) triggered by 109.236.44.129 (dynamic.pool-109-236-44-129.abi ... show more (mod_security) mod_security (id:210350) triggered by 109.236.44.129 (dynamic.pool-109-236-44-129.abissnet.al): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 12:59:11.909482 2026] [security2:error] [pid 4226:tid 4226] [client 109.236.44.129:52252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jbowerslaw.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jbowerslaw.com"] [uri "/"] [unique_id "arqc35Azbdyd8C2rPYK4gwAAAA4"], referer: https://bestseochecker.online/dir/trusted-backlink-services-105493 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2025-12-16 23:48:52 (10 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇨🇭 backslash	2025-12-05 19:20:12 (10 months ago)	block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB	Bad Web Bot
Anonymous	2025-11-18 22:38:47 (11 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-15 08:52:29 (11 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 cloudmax	2025-10-16 10:14:06 (1 year ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 116.71.175.139

🇺🇸 72.215.46.30

🇮🇩 2001:4860:7:406::dc

🇨🇭 213.55.171.188

🇿🇦 197.185.213.142

🇻🇪 190.97.227.11

🇺🇸 129.121.78.84

🇩🇪 109.160.32.140

🇷🇺 91.228.67.19

🇫🇷 84.247.191.153

🇷🇸 78.30.137.214

🇸🇬 8.222.225.214

🇳🇬 197.211.61.5

🇪🇨 190.155.237.211

🇧🇷 170.78.66.105

🇪🇨 157.100.107.102

🇮🇹 151.95.23.125

🇨🇳 115.190.238.255

🇧🇬 79.124.58.158

🇺🇸 66.240.223.240