AbuseIPDB » 172.83.252.130
172.83.252.130
This IP was reported 8 times. Confidence of
Abuse
is 35% : ?
ISP
Caache LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS213954
Domain Name
caache.net
Country
🇫🇮
Finland
City
Helsinki, Uusimaa
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 172.83.252.130 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
172.83.252.130 was first reported on
April 5th 2026 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇧
Oakley
2026-06-15 05:34:16
(3 days ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇺🇸
TPI-Abuse
2026-06-14 20:25:21
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 172.83.252.130 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 172.83.252.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:25:18.025914 2026] [security2:error] [pid 10980:tid 10980] [client 172.83.252.130:58671] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.voodooshop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.voodooshop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai8OLqi0OLP4D_X7w43lMwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-06-09 10:08:53
(1 week ago)
172.83.252.130 - - [09/Jun/2026:12:08:53 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.pri ...
show more
172.83.252.130 - - [09/Jun/2026:12:08:53 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-05 16:06:03
(1 week ago)
Bad Web Bot
🇺🇸
kosada.com
2026-05-27 14:41:58
(3 weeks ago)
Web password guessing
Brute-Force
🇩🇪
HandyTreff.de
2026-05-21 15:12:35
(3 weeks ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -38.658 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -38.658 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.167.86
show less
Web App Attack
Bad Web Bot
🇨🇭
backslash
2026-04-19 05:18:03
(1 month ago)
Bad Web Bot
🇪🇸
el-brujo
2026-04-05 15:20:22
(2 months ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: AppleWe ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: AppleWebKit/539.39 (KHTML, like Gecko111) Action: managed_challenge Source: firewallManaged ASN Description: GTS-AS Country: FI Method: POST Timestamp: 2026-04-05T15:20:22Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: