JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.150.80.109

217.150.80.109 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 58%: ?

58%

ISP	Smart Networks S.a.r.l
Usage Type	Fixed Line ISP
ASN	AS34458
Domain Name	smartnetworkslb.net
Country	🇱🇧 Lebanon
City	Tripoli, North Lebanon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.150.80.109

Whois 217.150.80.109

IP Abuse Reports for 217.150.80.109:

This IP address has been reported a total of 72 times from 45 distinct sources. 217.150.80.109 was first reported on January 14th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 18:21:44 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 217.150.80.109 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 217.150.80.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:21:29.411299 2026] [security2:error] [pid 11624:tid 11624] [client 217.150.80.109:40177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|theledman.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "theledman.com"] [uri "/"] [unique_id "aqreKSBzKX_QHeua0M2xKgAAAA8"], referer: https://freenetworkmonitor.click/all/2886/34.html show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-09-16 09:06:17 (3 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (61, Abuse: 53) show less	Hacking Exploited Host Web App Attack
🇺🇸 gui-ying233	2026-09-15 20:20:58 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-09-14 22:59:21 (4 days ago)	unsolicited UDP packet to port 30283 (41 bytes)	Hacking
Anonymous	2026-09-14 07:43:51 (5 days ago)	denied traffic to a honeypot network. destination port 48249.	Port Scan Hacking
🇺🇸 Cyber Crusader	2026-09-14 00:08:28 (5 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 gui-ying233	2026-09-11 13:28:36 (1 week ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Tilellit.PRO	2026-09-11 01:16:08 (1 week ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-09-03 18:38:31 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-28 05:27:30 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-26 04:43:00 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 gui-ying233	2026-08-20 14:10:57 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 21:44:55 (4 weeks ago)	UDP flood (DDoS) vs AS215599: 3534 pkts / 5.05 MB to UDP 8443 across 256 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 3534 pkts / 5.05 MB to UDP 8443 across 256 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 21:44:55 (4 weeks ago)	UDP flood (DDoS) vs AS215599: 3534 pkts / 5.05 MB to UDP 8443 across 256 dst IP(s), 2026-08-19 21:46 ... show more UDP flood (DDoS) vs AS215599: 3534 pkts / 5.05 MB to UDP 8443 across 256 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇩🇪 Vegascosmetics	2026-08-16 00:04:48 (1 month ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected show less	Hacking Exploited Host Web App Attack

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 74.82.47.3

🇮🇩 202.46.28.140

🇪🇨 181.119.227.157

🇦🇷 181.26.197.247

🇳🇱 91.92.42.57

🇧🇬 79.124.58.86

🇦🇷 45.187.90.2

🇬🇧 35.203.211.11

🇺🇸 20.83.52.5

🇨🇳 223.100.72.67

🇦🇺 210.185.110.56

🇧🇴 181.115.181.140

🇧🇷 138.0.113.96

🇨🇳 114.86.60.186

🇹🇼 114.34.130.221

🇬🇷 83.235.21.125

🇫🇷 76.13.51.38

🇺🇸 47.230.243.78

🇧🇷 186.236.11.156

🇪🇨 181.113.114.61