JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.244.225.103

104.244.225.103 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 24%: ?

24%

ISP	Digicel Jamaica
Usage Type	Fixed Line ISP
ASN	AS40786
Domain Name	digicelgroup.com
Country	🇯🇲 Jamaica
City	Spanish Town, Saint Catherine Parish

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.244.225.103

Whois 104.244.225.103

IP Abuse Reports for 104.244.225.103:

This IP address has been reported a total of 28 times from 21 distinct sources. 104.244.225.103 was first reported on March 6th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-13 05:47:21 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 104.244.225.103 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 104.244.225.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:47:16.735352 2026] [security2:error] [pid 8742:tid 8742] [client 104.244.225.103:17016] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|edmestonfd.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edmestonfd.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as3F5F1o5K5RiOtukxIfwwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-10-12 00:09:17 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-10-10 06:42:04 (1 week ago)	Search protection: facets on category: 4 values in one group (limit 5), 4 groups (limit 3) / reCAPTC ... show more Search protection: facets on category: 4 values in one group (limit 5), 4 groups (limit 3) / reCAPTCHA challenge timed out show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-27 07:03:58 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 MatStef132	2026-09-12 01:10:12 (1 month ago)	MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 鬼影233	2026-09-11 16:48:05 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇮🇹 Progetto1	2026-08-22 11:22:02 (2 months ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇩🇪 LRob	2026-08-03 13:40:29 (2 months ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/time_limit~1763506800/cat_ids~145,549,207/tag_ids~442,212,472,260,477,239,338,632,574/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-07-14 02:07:58 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 104.244.225.103 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 104.244.225.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 22:07:52.653736 2026] [security2:error] [pid 2629464:tid 2629464] [client 104.244.225.103:40271] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.med-engineering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/dutas.com"] [unique_id "alWZ-Ado8dCJ5w_4a0X7jgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 INTEQ	2026-06-27 03:54:51 (3 months ago)	Web attack from 104.244.225.103	Web App Attack
🇩🇪 pltcldvlpr	2026-06-12 05:07:22 (4 months ago)	Bogus Useragent: 104.244.225.103 - - [12/Jun/2026:07:07:21 +0200] "GET /protocol?id=sn_5_99&offset=2 ... show more Bogus Useragent: 104.244.225.103 - - [12/Jun/2026:07:07:21 +0200] "GET /protocol?id=sn_5_99&offset=2100&seq=2164 HTTP/1.1" 403 5 "-" "Opera/8.43.(Windows 98; Win 9x 4.90; eu-ES) Presto/2.9.183 Version/11.00" asn=40786 org="Digicel Jamaica" country=JM ... show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-09 12:18:52 (4 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated encoding. Vegas Security	DDoS Attack Hacking Bad Web Bot
🇨🇭 ALPHANET	2026-05-09 13:05:06 (5 months ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇺🇸 TPI-Abuse	2026-03-18 01:16:03 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 104.244.225.103 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 104.244.225.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 21:15:58.530265 2026] [security2:error] [pid 24227:tid 24227] [client 104.244.225.103:57382] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hudson II/Vermont Bark/Loveseat/Thumbs.db"] [unique_id "abn8znT6fOzTUUhsmpfc6gAAAAQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hudson%20II/Vermont%20Bark/Loveseat/ show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 mypatricks	2026-03-15 06:34:17 (7 months ago)	104.244.225.103 \| Port: 9753 \| DNS: 104.244.225.103 2026-03-15T14:34:15+08:00 America/Jamaica \| IPs ... show more 104.244.225.103 \| Port: 9753 \| DNS: 104.244.225.103 2026-03-15T14:34:15+08:00 America/Jamaica \| IPs reserved list \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 HTTP/1.1 443 GET \| URL: /hashtag/sanrio/?b85ef00aa9c5f4d50799513eb=ms-my&code=ms-my \| Ref: https://xxxxxx/hashtag/sanrio/?469516c76d0987ba087480096d566a1=SGD&code=SGD \| Country: JM/Jamaica/−05:00 IP City: Spanish Town Windows 9dc97dc37ca83310-KIN/KIN 1 hits/0 secs Robots 4 show less	Brute-Force Web App Attack Blog Spam Web Spam Exploited Host

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.132.132

🇬🇧 64.205.72.10

🇺🇸 216.180.246.250

🇮🇳 216.10.242.215

🇲🇽 201.119.236.102

🇦🇷 186.139.251.57

🇨🇱 186.78.17.239

🇺🇸 184.105.139.80

🇮🇳 180.94.216.137

🇺🇸 165.154.162.193

🇸🇬 149.118.51.53

🇭🇷 149.102.247.245

🇮🇩 103.187.165.26

🇧🇩 103.159.2.113

🇸🇮 102.220.161.170

🇳🇱 77.91.71.91

🇺🇸 66.132.224.24

🇺🇸 52.20.62.58

🇨🇦 51.222.26.148

🇸🇬 43.156.250.119