JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 216.10.217.103

216.10.217.103 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 55%: ?

55%

ISP	Columbus Communications Jamaica Limited
Usage Type	Fixed Line ISP
ASN	AS30689
Domain Name	j2limited.com
Country	🇯🇲 Jamaica
City	May Pen, Clarendon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 216.10.217.103

Whois 216.10.217.103

IP Abuse Reports for 216.10.217.103:

This IP address has been reported a total of 67 times from 37 distinct sources. 216.10.217.103 was first reported on December 30th 2020, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Vegascosmetics	2026-10-14 15:05:28 (3 days ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (62, Abuse: 55) show less	Hacking Exploited Host Web App Attack
🇷🇺 Darth Vader	2026-10-13 08:24:12 (4 days ago)	nfdump top talker: 216.10.217.103 \| first seen 2026-10-13 08:24:12.672 \| duration 00:00:00.085 \| flo ... show more nfdump top talker: 216.10.217.103 \| first seen 2026-10-13 08:24:12.672 \| duration 00:00:00.085 \| flows=2 \| packets=49104 \| bytes=35.8 M \| pps=572 \| bps=3.3 M \| bpp=729 \| proto=any show less	DDoS Attack Port Scan Exploited Host
🇫🇮 saamkuu	2026-10-13 05:50:23 (4 days ago)	DDoS botnet: TCP connection flood, 6 connections to port 443.	DDoS Attack
🇷🇺 Darth Vader	2026-10-12 17:31:30 (5 days ago)	nfdump top talker: 216.10.217.103 \| first seen 2026-10-12 20:31:30.176 \| duration 00:00:00.072 \| flo ... show more nfdump top talker: 216.10.217.103 \| first seen 2026-10-12 20:31:30.176 \| duration 00:00:00.072 \| flows=1 \| packets=20460 \| bytes=15.3 M \| pps=281 \| bps=1.7 M \| bpp=745 \| proto=udp show less	DDoS Attack Exploited Host
🇫🇷 Tilellit.PRO	2026-10-09 01:12:20 (1 week ago)	WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies	DDoS Attack Bad Web Bot
🇫🇮 abdubhai	2026-10-08 10:13:11 (1 week ago)	216.10.217.103 - - [08/Oct/2026: ...	Brute-Force
🇫🇷 dynamix	2026-10-07 10:56:07 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 Séfora Srl	2026-10-02 00:00:38 (2 weeks ago)	Failed attempt detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇫🇷 applemooz	2026-10-01 10:31:23 (2 weeks ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 16:28:48 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 216.10.217.103 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 216.10.217.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 12:28:42.681785 2026] [security2:error] [pid 916:tid 916] [client 216.10.217.103:62259] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|militaryordnance.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "militaryordnance.com"] [uri "/"] [unique_id "arqVuoIA4Mafc5OEsGKjNwAAAA8"], referer: https://bestlinkchecker.online/dir/trusted-domain-backlinks-136671 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 05:17:42 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 06:30:48 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 01:39:50 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
Anonymous	2026-09-21 01:24:28 (3 weeks ago)	denied Telnet access attempt. destination port 23.	Port Scan Brute-Force
🇺🇸 鬼影233	2026-09-05 18:17:22 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇺🇸 129.121.117.162

🇨🇭 209.99.190.215

🇷🇺 194.67.203.160

🇲🇽 187.244.69.181

🇧🇷 187.50.226.182

🇫🇷 161.97.108.170

🇨🇳 116.179.37.170

🇨🇳 112.27.230.157

🇩🇪 35.246.255.132

🇺🇸 24.22.154.179

🇺🇸 18.213.27.222

🇹🇼 220.130.7.191

🇬🇧 200.138.46.218

🇩🇪 130.12.180.35

🇨🇳 117.32.132.170

🇨🇳 106.13.46.38

🇺🇸 104.22.160.42

🇫🇷 92.205.229.83

🇨🇦 85.217.149.51