JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.83.161.147

183.83.161.147 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 57%: ?

57%

ISP	ACT Hyderabad
Usage Type	Fixed Line ISP
ASN	AS55577
Hostname(s)	183.83.161.147.actcorp.in
Domain Name	actcorp.in
Country	🇮🇳 India
City	Hyderabad, Telangana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.83.161.147

Whois 183.83.161.147

IP Abuse Reports for 183.83.161.147:

This IP address has been reported a total of 23 times from 11 distinct sources. 183.83.161.147 was first reported on December 25th 2020, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-07-03 07:15:00 (7 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-03 05:40:02 (9 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/183.83.161.147.actcorp.in	Web App Attack
🇫🇷 dynamix	2026-07-02 07:14:38 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-02 03:18:24 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 183.83.161.147 (183.83.161.147.actcorp.in): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 183.83.161.147 (183.83.161.147.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 23:18:17.113556 2026] [security2:error] [pid 28225:tid 28225] [client 183.83.161.147:28040] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 183.83.161.147 (+1 hits since last alert)\|astglobaltech.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "astglobaltech.com"] [uri "/xmlrpc.php"] [unique_id "akXYeUPUE6EqTloD0BSBJgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 08:21:12 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 183.83.161.147 (183.83.161.147.actcorp.in): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 183.83.161.147 (183.83.161.147.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 04:21:04.861303 2026] [security2:error] [pid 11728:tid 11728] [client 183.83.161.147:28842] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 183.83.161.147 (+1 hits since last alert)\|sfgardening.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sfgardening.com"] [uri "/xmlrpc.php"] [unique_id "akN8cIO6GJn2Yj1XHak45wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-06-30 03:53:47 (3 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇫🇷 dynamix	2026-06-27 11:30:23 (6 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-27 09:37:14 (6 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IN/India/183.83.161.147.actcorp.in	Web App Attack
🇪🇸 masterguru	2026-06-25 10:35:02 (1 week ago)	(xmlrpc) Failed xmlrpc access from 183.83.161.147 (IN/India/183.83.161.147.actcorp.in): 5 in the las ... show more (xmlrpc) Failed xmlrpc access from 183.83.161.147 (IN/India/183.83.161.147.actcorp.in): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-06-24 09:55:15 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 183.83.161.147 (183.83.161.147.actcorp.in): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 183.83.161.147 (183.83.161.147.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 05:55:11.016662 2026] [security2:error] [pid 31448:tid 31448] [client 183.83.161.147:27721] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 183.83.161.147 (+1 hits since last alert)\|yerevanpress.am\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yerevanpress.am"] [uri "/xmlrpc.php"] [unique_id "ajupf-x8wMYPZ_nzbFIZdgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 noise.agency	2026-06-24 09:52:13 (1 week ago)	(wordpress) Failed wordpress login from 183.83.161.147 (IN/India/183.83.161.147.actcorp.in)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-24 09:07:50 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 183.83.161.147 (183.83.161.147.actcorp.in): 1 i ... show more (mod_security) mod_security (id:240335) triggered by 183.83.161.147 (183.83.161.147.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 05:07:45.545984 2026] [security2:error] [pid 29508:tid 29508] [client 183.83.161.147:28008] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 183.83.161.147 (+1 hits since last alert)\|tonytremblayauthor.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tonytremblayauthor.com"] [uri "/xmlrpc.php"] [unique_id "ajueYeRc5B6GoqLmmiegQAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-24 03:59:59 (1 week ago)	[redacted] 183.83.161.147 - - [24/Jun/2026:05:59:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 183.83.161.147 - - [24/Jun/2026:05:59:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 183.83.161.147 - - [24/Jun/2026:05:59:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 183.83.161.147 - - [24/Jun/2026:05:59:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 183.83.161.147 - - [24/Jun/2026:05:59:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)" [redacted] 183.83.161.147 - - [24/Jun/2026:05:59:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)" ... show less	Hacking Web App Attack
Anonymous	2026-06-22 07:53:04 (1 week ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇪🇸 alferez	2026-06-22 04:46:20 (1 week ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇻 150.107.202.139

🇫🇷 85.217.140.38

🇧🇷 200.149.213.242

🇬🇧 185.247.137.166

🇨🇳 113.141.72.65

🇨🇭 104.251.180.9

🇺🇸 66.132.172.104

🇬🇧 35.203.211.230

🇬🇧 5.226.140.81

🇵🇭 165.154.58.108

🇩🇿 154.241.3.7

🇸🇬 118.194.234.8

🇮🇳 103.216.145.2

🇩🇪 47.245.138.189

🇳🇱 45.148.10.239

🇧🇪 35.195.97.12

🇧🇪 34.22.151.192

🇮🇩 8.215.88.36

🇳🇱 185.171.254.112

🇻🇳 165.154.187.159