JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 173.225.242.254

173.225.242.254 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 20%: ?

20%

ISP	Digicel Jamaica
Usage Type	Mobile ISP
ASN	AS40786
Hostname(s)	digijmres-254-242-225-173.digicelbroadband.com
Domain Name	digicelgroup.com
Country	🇯🇲 Jamaica
City	Kingston, Kingston

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 173.225.242.254

Whois 173.225.242.254

IP Abuse Reports for 173.225.242.254:

This IP address has been reported a total of 25 times from 14 distinct sources. 173.225.242.254 was first reported on November 26th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-16 15:23:14 (6 days ago)	(mod_security) mod_security (id:210350) triggered by 173.225.242.254 (digijmres-254-242-225-173.digi ... show more (mod_security) mod_security (id:210350) triggered by 173.225.242.254 (digijmres-254-242-225-173.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:23:09.737283 2026] [security2:error] [pid 15712:tid 15712] [client 173.225.242.254:60654] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.powerkiteforum.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "atJBXS-KwUYO8Svhf3T45AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-13 06:30:36 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /nombreuses-gelees-blanches-rele ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /nombreuses-gelees-blanches-relevees-ce-mardi-28-mars-2023/ \| ua: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Mobile Safari show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 06:01:36 (4 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-17 10:11:35 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 173.225.242.254 (digijmres-254-242-225-173.digi ... show more (mod_security) mod_security (id:210350) triggered by 173.225.242.254 (digijmres-254-242-225-173.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:11:30.698569 2026] [security2:error] [pid 30090:tid 30090] [client 173.225.242.254:40430] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.doreenkimura.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.doreenkimura.com"] [uri "/"] [unique_id "aqu80ulLi8lCiTU01CXGNwAAAAM"], referer: https://dadrpachecker.space/dir/editorial-seo-backlinks-57716 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 02:56:02 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 173.225.242.254 (digijmres-254-242-225-173.digi ... show more (mod_security) mod_security (id:210350) triggered by 173.225.242.254 (digijmres-254-242-225-173.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 22:55:58.107563 2026] [security2:error] [pid 829:tid 829] [client 173.225.242.254:22928] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|jiggaboojones.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jiggaboojones.com"] [uri "/"] [unique_id "aqizvqkqgjNeyK_c-MB6UgAAABE"], referer: https://oldoldman.blogspot.com/2007/12/oh-god-im-so-fucking-sweaty.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-04 03:34:42 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-30 08:22:34 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-08-23 04:03:07 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-06-16 12:30:39 (4 months ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/10948/form_key/dmmovW9mixLMwaF7/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-14 19:32:38 (4 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-05-23 20:53:24 (4 months ago)	Web App Attack, Hacking	Hacking Web App Attack
🇫🇮 inlink.ltd	2026-05-19 12:11:22 (5 months ago)	WAF PoW failure, possible botnet behavior, IP mismatch, GET request made by 173.225.242.254 was not ... show more WAF PoW failure, possible botnet behavior, IP mismatch, GET request made by 173.225.242.254 was not IP who made PoW POST request later show less	DDoS Attack Exploited Host
🇪🇸 el-brujo	2026-03-01 00:40:28 (7 months ago)	Cloudflare WAF: Request Path: /inclusiones/plantillas/006%22%29%20AS%20VU470cc3%20WHERE%201648=1648A ... show more Cloudflare WAF: Request Path: /inclusiones/plantillas/006%22%29%20AS%20VU470cc3%20WHERE%201648=1648AND%2F%2A%2A%2F9030=CONCAT%28%27~%27%2C%28SELECT%2F%2A%2A%2F%28CASE%2F%2A%2A%2FWHEN%2F%2A%2A%2F%289030=9030%29%2F%2A%2A%2FTHEN%2F%2A%2A%2F%271%27%2F%2A%2A%2FELSE%2F%2A%2A%2F%270%27%2F%2A%2A%2FEND%29%29%2C%27~%27%29--%20-/related-posts.js Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Action: log Source: firewallManaged ASN Description: DIG001 - Digicel Jamaica Country: JM Method: GET Timestamp: 2026-03-01T00:40:28Z ruleId: 3b0c61407d0b4f7d87e516472116d2fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇮🇹 VHosting	2025-12-24 01:55:04 (9 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-26 10:19:22 (10 months ago)	scanning http requests from known botnet	Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.87

🇳🇱 185.223.235.22

🇺🇸 173.255.223.49

🇮🇳 157.85.17.58

🇸🇬 150.109.16.200

🇺🇸 136.87.123.156

🇨🇭 79.127.184.131

🇧🇷 69.6.222.101

🇰🇷 58.142.131.86

🇩🇪 46.151.182.191

🇧🇪 34.156.238.134

🇮🇳 202.141.10.223

🇧🇷 201.59.91.208

🇹🇼 198.235.24.28

🇺🇸 162.216.150.99

🇦🇷 148.227.73.163

🇳🇵 111.119.39.87

🇺🇸 74.7.243.217

🇧🇷 45.164.39.253

🇩🇿 41.111.183.207