JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.243.91.115

77.243.91.115 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 11%: ?

11%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.243.91.115

Whois 77.243.91.115

IP Abuse Reports for 77.243.91.115:

This IP address has been reported a total of 37 times from 15 distinct sources. 77.243.91.115 was first reported on March 11th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-06-09 05:36:55 (1 week ago)	Detected by WP fail2ban 2026-06-09T07:36:54.144363+02:00 wordpress: Authentication attempt from 77.2 ... show more Detected by WP fail2ban 2026-06-09T07:36:54.144363+02:00 wordpress: Authentication attempt from 77.243.91.115 show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-13 20:18:54 (1 month ago)	(mod_security) mod_security (id:211030) triggered by 77.243.91.115 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211030) triggered by 77.243.91.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 16:18:46.319450 2026] [security2:error] [pid 11098:tid 11098] [client 77.243.91.115:23385] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack\|\|www.genesis-castle.com\|F\|2"] [data "Matched Data: ('~'\|\|( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/index.php"] [unique_id "agTcpssvCedQBXh2HmjbWQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-12 14:32:58 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 77.243.91.115 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 77.243.91.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 10:32:51.765049 2026] [security2:error] [pid 3837597:tid 3837597] [client 77.243.91.115:36679] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|osbyink.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "osbyink.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adutE-8HX-k1yQqjqndYAwAAAAY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-03-26 20:11:00 (2 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇨🇭 backslash	2026-03-22 06:24:21 (2 months ago)	DDoS-SZ	DDoS Attack
🇺🇸 TPI-Abuse	2026-01-03 20:42:23 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 77.243.91.115 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 77.243.91.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 03 15:42:19.783943 2026] [security2:error] [pid 11108:tid 11108] [client 77.243.91.115:40537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|yubagals.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yubagals.com"] [uri "/"] [unique_id "aVl_K755WsddaT0gNS3c-AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-03 19:24:31 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 77.243.91.115 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 77.243.91.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 03 14:24:26.431247 2026] [security2:error] [pid 2634:tid 2634] [client 77.243.91.115:31667] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|venturecg.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "venturecg.com"] [uri "/"] [unique_id "aVls6pRNqb7NoY4yq2fCNwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-01-03 12:46:52 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇨🇭 backslash	2025-10-17 01:35:25 (8 months ago)	block ruleset 1E8A9918B1655D0828F2EEF05553DD2681055C9A	Web Spam
🇺🇸 nowyouknow	2025-10-17 01:10:29 (8 months ago)	(From [email protected]) Hi, We reviewed your website and noticed accessibility gaps that need ... show more (From [email protected]) Hi, We reviewed your website and noticed accessibility gaps that need attention. Inaccessible sites don’t just lose clients — they also face growing legal risks. That’s why we’re offering you a free scan, a detailed report, and your first fix at no cost. Start your free scan today: http://scan4.free Best, The PLURO Team In case you wish to stop getting any more notifications from this campaign, simply fill the form at bit. ly/fillunsubform with your domain address (URL). Lange Strasse 39, Coeymans, CA, USA, 95440 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-10-13 22:55:48 (8 months ago)	(From [email protected]) Hi, We’ve helped thousands of businesses fix accessibility issues, ... show more (From [email protected]) Hi, We’ve helped thousands of businesses fix accessibility issues, stay compliant, and reach more customers. We’d be glad to assist you as well Here’s what you’ll get from us today: Free Accessibility scan Free Detailed report Free First fix + accessibility toolbar Start by scanning your site: http://scan4.free Best, The PLURO Team If you choose to opt-out of additional emails from this message, just fill the form at bit. ly/fillunsubform with your domain address (URL). 43 Henry Moss Court, Bridgehampton, CA, USA, 95322 show less	Phishing Web Spam
🇦🇺 oncord	2025-10-12 02:12:29 (8 months ago)	Form spam	Web Spam
🇦🇺 oncord	2025-10-04 05:58:32 (8 months ago)	Form spam	Web Spam
🇺🇸 oncord	2025-10-03 02:04:27 (8 months ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-10-02 20:12:59 (8 months ago)	(From [email protected]) Hi, We’ve helped thousands of businesses fix accessibility issues, sta ... show more (From [email protected]) Hi, We’ve helped thousands of businesses fix accessibility issues, stay compliant, and reach more customers. We’d be glad to assist you as well Here’s what you’ll get from us today: Free Accessibility scan Free Detailed report Free First fix + accessibility toolbar Start by scanning your site: http://scan4.free Best, The PLURO Team When you no longer want to receive any more communications from this campaign, please fill the form at bit. ly/fillunsubform with your domain address (URL). Via Vigizzi 88, Ellicottville, CA, USA, 90971 show less	Phishing Web Spam

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇸🇦 178.73.101.100

🇺🇸 172.96.161.212

🇸🇬 165.245.176.51

🇺🇦 109.86.146.236

🇺🇸 103.143.11.150

🇪🇬 102.189.0.154

🇺🇸 98.90.43.197

🇺🇸 91.230.168.250

🇺🇿 84.54.86.93

🇩🇪 69.5.169.168

🇩🇪 69.5.169.136

🇺🇸 64.62.156.165

🇫🇷 62.171.128.153

🇺🇸 54.158.133.120

🇻🇪 38.172.167.100

🇺🇸 208.109.52.213

🇬🇧 206.189.23.122

🇨🇴 190.60.47.163

🇮🇳 182.75.197.174