JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.244.231.209

104.244.231.209 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 13%: ?

13%

ISP	Digicel Jamaica
Usage Type	Mobile ISP
ASN	AS40786
Domain Name	digicelgroup.com
Country	🇯🇲 Jamaica
City	Kingston, Kingston

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.244.231.209

Whois 104.244.231.209

IP Abuse Reports for 104.244.231.209:

This IP address has been reported a total of 20 times from 9 distinct sources. 104.244.231.209 was first reported on July 14th 2021, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-21 01:38:39 (1 day ago)	(mod_security) mod_security (id:210350) triggered by 104.244.231.209 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 104.244.231.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:38:33.032007 2026] [security2:error] [pid 2556:tid 2556] [client 104.244.231.209:61982] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|powerkiteforum.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "atgXmesTrnIOz_ypFSXgiQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-04 09:55:47 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 104.244.231.209 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 104.244.231.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 05:55:43.127007 2026] [security2:error] [pid 32149:tid 32149] [client 104.244.231.209:48136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|nesetsv.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nesetsv.com"] [uri "/"] [unique_id "asIin0NTvqjNgmpFjNOzFwAAAAo"], referer: https://backlinkbuildingservice.online/dir/seo-link-building-experts-146686 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-02 05:48:50 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 104.244.231.209 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 104.244.231.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 01:48:44.478581 2026] [security2:error] [pid 20415:tid 20415] [client 104.244.231.209:45736] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|madbomberfireworks.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "madbomberfireworks.com"] [uri "/"] [unique_id "ar9FvOaRkFqZpwAbaEyPyAAAAAE"], referer: https://oneclickbacklinkmaker.space/dir/high-dr-backlinks-127869 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-24 05:17:00 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 17:10:08 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-17 14:26:38 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-30 22:31:49 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-28 04:30:52 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-24 20:34:11 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-19 08:24:39 (3 months ago)	Web App Attack	Web App Attack
🇺🇸 stechusa	2026-03-20 05:09:39 (7 months ago)	[Askari] ELEVATED_THREAT \| 245 IPs targeting /brand.html \| URL template shared by 5 IPs: /brand.html ... show more [Askari] ELEVATED_THREAT \| 245 IPs targeting /brand.html \| URL template shared by 5 IPs: /brand.html?bulb_shape_type=&bulb_type=&cec_status=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.85, unique_ips=485) \| Signals: path_concentration, recv_q_stall, facet_param_template, http1_on_tls, concurrent_facet_load show less	Web App Attack Hacking Web Spam
🇺🇸 stechusa	2026-03-20 05:09:39 (7 months ago)	ELEVATED_THREAT \| 245 IPs targeting /brand.html \| URL template shared by 5 IPs: /brand.html?bulb_sha ... show more ELEVATED_THREAT \| 245 IPs targeting /brand.html \| URL template shared by 5 IPs: /brand.html?bulb_shape_type=&bulb_type=&cec_status=&mode=list&p= \| Facet request during elevated threat (facet_ratio=0.85, unique_ips=485) show less	Web App Attack Hacking Web Spam
🇨🇦 polycoda	2026-03-13 11:17:06 (7 months ago)	🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27	DDoS Attack
Anonymous	2025-11-25 04:41:27 (10 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-18 05:31:32 (11 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.174.109.143

🇺🇸 134.122.11.82

🇺🇸 130.131.162.15

🇺🇸 2604:2dc0:101:100::1f98

🇺🇸 216.227.169.91

🇭🇰 216.118.231.170

🇨🇱 190.100.196.203

🇳🇱 185.136.15.110

🇸🇬 150.109.10.219

🇺🇸 142.111.152.152

🇩🇪 109.160.32.153

🇳🇵 103.134.219.233

🇩🇪 89.125.156.55

🇫🇷 88.142.46.185

🇫🇷 85.217.140.45

🇳🇱 77.91.71.92

🇺🇸 66.249.68.97

🇫🇮 45.147.8.45

🇬🇧 35.203.210.139

🇦🇺 34.40.145.110