JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 63.143.116.148

63.143.116.148 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 23%: ?

23%

ISP	Digicel Jamaica
Usage Type	Mobile ISP
ASN	AS40786
Domain Name	digicelgroup.com
Country	🇯🇲 Jamaica
City	Kingston, Kingston

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 63.143.116.148

Whois 63.143.116.148

IP Abuse Reports for 63.143.116.148:

This IP address has been reported a total of 12 times from 10 distinct sources. 63.143.116.148 was first reported on August 24th 2025, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 unhfree.net	2026-09-17 05:53:07 (22 hours ago)	Sep 17 07:53:05 canopus postfix/smtpd[1425312]: NOQUEUE: reject: RCPT from unknown[63.143.116.148]: ... show more Sep 17 07:53:05 canopus postfix/smtpd[1425312]: NOQUEUE: reject: RCPT from unknown[63.143.116.148]: 554 5.7.1 Service unavailable; Client host [63.143.116.148] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/63.143.116.148 / Listed by PBL, see https://check.spamhaus.org/query/ip/63.143.116.148 / Listed by XBL, see https://check.spamhaus.org/query/ip/63.143.116.148; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<googlemail.com> Sep 17 07:53:05 canopus postfix/smtpd[1425312]: NOQUEUE: reject: RCPT from unknown[63.143.116.148]: 554 5.7.1 Service unavailable; Client host [63.143.116.148] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/63.143.116.148 / Listed by PBL, see https://check.spamhaus.org/query/ip/63.143.116.148 / Listed by XBL, see https://check.spamhaus.org/query/ip/63.143.116.148; from=<[email protected]> to=<[email protected] ... show less	Brute-Force Exploited Host
🇺🇸 TPI-Abuse	2026-09-02 09:41:29 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 63.143.116.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 63.143.116.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 05:41:22.097367 2026] [security2:error] [pid 24500:tid 24500] [client 63.143.116.148:43428] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|dmasoftlab.com\|F\|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dmasoftlab.com"] [uri "/cont/download/libltdl3-dev_1.5.26-1ubuntu1_amd64.deb"] [unique_id "apfvQlYQnR6GST2audcbwQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-08-25 05:17:17 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-08-03 13:40:40 (1 month ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/cat_ids~549,646,647/tag_ids~242,491,785,257,758/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇩🇪 Vegascosmetics	2026-06-09 19:43:49 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 ipblock.com	2026-03-26 09:44:00 (5 months ago)	IPBlock protected site ID [3192-af][s=06]. Exploit request, vulnerability probe.	Hacking Bad Web Bot Web App Attack
🇬🇧 masterguru	2026-03-11 18:15:04 (6 months ago)	wp-comments-post.php request blocked, no referer. Pattern match "wp-comments-post.php" at REQUEST_UR ... show more wp-comments-post.php request blocked, no referer. Pattern match "wp-comments-post.php" at REQUEST_URI. (88520-185) show less	Hacking
Anonymous	2026-01-03 17:03:32 (8 months ago)	botnet	DDoS Attack
🇮🇹 VHosting	2025-12-23 18:25:19 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-11-25 02:19:52 (9 months ago)	scanning http requests from known botnet	Web App Attack
Anonymous	2025-11-20 23:56:15 (9 months ago)	scanning http requests from known botnet	Web App Attack
🇨🇭 backslash	2025-08-24 07:23:58 (1 year ago)		Bad Web Bot

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇾 205.209.65.70

🇦🇷 190.196.253.52

🇸🇬 185.200.116.75

🇵🇪 179.6.7.14

🇺🇸 174.176.77.33

🇺🇸 172.98.32.238

🇩🇪 167.94.145.22

🇫🇷 162.159.124.5

🇰🇪 102.210.58.135

🇰🇷 59.19.51.241

🇺🇸 47.251.174.68

🇧🇪 34.156.150.64

🇩🇪 201.79.5.69

🇲🇽 189.203.103.166

🇹🇷 176.236.127.114

🇺🇸 147.185.132.36

🇨🇦 137.184.169.96

🇷🇴 92.118.39.50

🇷🇴 80.94.92.234

🇩🇪 69.5.169.63