JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 59.97.83.81

59.97.83.81 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 60%: ?

60%

ISP	Broadband Multiplay Project, O/o DGM BB, NOC BSNL Bangalore
Usage Type	Fixed Line ISP
ASN	AS9829
Domain Name	bsnl.in
Country	🇮🇳 India
City	Dharashiv, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 59.97.83.81

Whois 59.97.83.81

IP Abuse Reports for 59.97.83.81:

This IP address has been reported a total of 16 times from 10 distinct sources. 59.97.83.81 was first reported on December 12th 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 alferez	2026-07-23 12:45:24 (3 hours ago)	xmlrpc.php attack DOS	Hacking Exploited Host Web App Attack
Anonymous	2026-07-23 10:17:06 (6 hours ago)	Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 09:16:24 (7 hours ago)	(mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 05:16:18.242341 2026] [security2:error] [pid 2050554:tid 2050554] [client 59.97.83.81:58015] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.97.83.81 (+1 hits since last alert)\|magacine.tv\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "magacine.tv"] [uri "/xmlrpc.php"] [unique_id "amHb4piZ3iYRbVWs5tv5eAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 07:15:15 (9 hours ago)	(mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 03:15:07.923546 2026] [security2:error] [pid 1903879:tid 1903879] [client 59.97.83.81:51637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.97.83.81 (+1 hits since last alert)\|mjkhan.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mjkhan.com"] [uri "/xmlrpc.php"] [unique_id "amG_ezE07VstLlljWp8qBgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-23 05:39:35 (10 hours ago)	[redacted] 59.97.83.81 - - [23/Jul/2026:07:38:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Wor ... show more [redacted] 59.97.83.81 - - [23/Jul/2026:07:38:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 59.97.83.81 - - [23/Jul/2026:07:39:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/13.0; WordPress/6.4; http://site49388397.com" [redacted] 59.97.83.81 - - [23/Jul/2026:07:39:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 59.97.83.81 - - [23/Jul/2026:07:39:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com" [redacted] 59.97.83.81 - - [23/Jul/2026:07:39:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack
🇺🇸 Dolphi	2026-07-23 03:20:04 (13 hours ago)	Excessive POST /xmlrpc.php requests	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-07-23 02:47:43 (13 hours ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇫🇷 dynamix	2026-07-23 02:34:50 (14 hours ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
Anonymous	2026-07-22 23:51:19 (16 hours ago)	[redacted] 59.97.83.81 - - [23/Jul/2026:01:50:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jet ... show more [redacted] 59.97.83.81 - - [23/Jul/2026:01:50:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" [redacted] 59.97.83.81 - - [23/Jul/2026:01:50:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 59.97.83.81 - - [23/Jul/2026:01:50:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 59.97.83.81 - - [23/Jul/2026:01:51:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site13298608.com" [redacted] 59.97.83.81 - - [23/Jul/2026:01:51:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site30535342.com" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 19:35:03 (21 hours ago)	(mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 15:34:57.199649 2026] [security2:error] [pid 1254002:tid 1254002] [client 59.97.83.81:61385] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.97.83.81 (+1 hits since last alert)\|consolidatedoperationsgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "consolidatedoperationsgroup.com"] [uri "/xmlrpc.php"] [unique_id "amEbYevNmPJikcmcujOyfAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 18:35:51 (22 hours ago)	(mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 14:35:44.599116 2026] [security2:error] [pid 20181:tid 20181] [client 59.97.83.81:51374] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.97.83.81 (+1 hits since last alert)\|accommodation-perthairport.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "accommodation-perthairport.com"] [uri "/xmlrpc.php"] [unique_id "amENgMlNVVHBmWzGBcrE-AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 17:34:26 (23 hours ago)	(mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 13:34:20.271646 2026] [security2:error] [pid 1111600:tid 1111600] [client 59.97.83.81:54885] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.97.83.81 (+1 hits since last alert)\|anchor07.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "anchor07.com"] [uri "/xmlrpc.php"] [unique_id "amD_HIIhIRUzg1tsO-Q6bQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 16:32:34 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240335) triggered by 59.97.83.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 12:32:30.261950 2026] [security2:error] [pid 1682949:tid 1682949] [client 59.97.83.81:49189] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 59.97.83.81 (+1 hits since last alert)\|mundanestudies.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mundanestudies.org"] [uri "/xmlrpc.php"] [unique_id "amDwnq_j8UT8trnat8c9OQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-22 14:17:51 (1 day ago)	(wordpress) Failed wordpress login from 59.97.83.81 (IN/India/-)	Brute-Force
🇪🇸 masterguru	2026-07-22 13:47:45 (1 day ago)	(xmlrpc) Failed xmlrpc access from 59.97.83.81 (IN/India/-): 5 in the last 3600 secs (0-122)	Hacking

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.86.69.178

🇺🇦 195.64.250.112

🇷🇴 193.32.162.83

🇨🇳 182.119.231.24

🇨🇳 116.181.17.222

🇧🇩 103.183.62.2

🇧🇩 103.103.35.120

🇺🇸 54.71.222.198

🇳🇱 45.148.10.152

🇺🇸 20.221.57.26

🇰🇷 211.43.107.179

🇺🇸 198.37.116.170

🇵🇾 186.16.59.246

🇺🇸 170.106.163.84

🇨🇳 115.190.138.119

🇨🇳 101.126.68.11

🇹🇷 94.154.43.230

🇺🇸 68.207.224.247

🇺🇸 66.249.79.36

🇲🇾 47.250.85.160