JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.83.25.116

77.83.25.116 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 9%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.83.25.116

Whois 77.83.25.116

IP Abuse Reports for 77.83.25.116:

This IP address has been reported a total of 15 times from 11 distinct sources. 77.83.25.116 was first reported on July 27th 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-15 09:28:58 (3 weeks ago)	Banned by Fail2Ban on server	Bad Web Bot
🇮🇩 Burayot	2026-05-13 22:01:32 (3 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 77.83.25.116 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 77.83.25.116 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2026-04-04 07:51:03 (2 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-28 02:05:26 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 77.83.25.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 77.83.25.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 21:05:21.944509 2026] [security2:error] [pid 3540:tid 3540] [client 77.83.25.116:34775] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sutherlandyogastudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sutherlandyogastudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaJNYQ-KwNDXFAlVQJUW4QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 17:11:32 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 77.83.25.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 77.83.25.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 12:11:24.149291 2026] [security2:error] [pid 13410:tid 13410] [client 77.83.25.116:20047] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aemcmullin.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aemcmullin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ3bvDFdDdSl4uXb3s8KwQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-02-21 23:00:52 (3 months ago)	(Mod_security)	Web App Attack Brute-Force Bad Web Bot
🇮🇳 Mcshield.org	2025-12-01 09:10:10 (6 months ago)	POST /HNAP1/ or /shell login attempt - Hajime	Port Scan Web App Attack SSH
Anonymous	2025-11-29 20:53:50 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.29 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
🇨🇿 lp	2025-11-28 05:52:27 (6 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 77.83.25.116 2025-11-28T05:23:15+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 77.83.25.116 2025-11-28T05:23:15+01:00 vpn Access-Reject 'cisco' station: 77.83.25.116 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-03-07 02:45:11 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 77.83.25.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 77.83.25.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 06 21:45:06.685187 2025] [security2:error] [pid 22415:tid 22415] [client 77.83.25.116:31157] [client 77.83.25.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isjustabitch.anthonyjoseph.us"] [uri "/.env"] [unique_id "Z8pdsnjx0y9tFjNZ3MOthgAAAAw"], referer: https://tasamm.com/about/ggg174.html show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2025-02-27 20:34:58 (1 year ago)	Login credentials theft attempt	Hacking
🇵🇱 sefinek.net	2024-08-31 03:38:09 (1 year ago)	IP 77.83.25.116 [US] triggered Cloudflare WAF (firewallCustom). Action taken: CHALLENGE ASN: 51765 ( ... show more IP 77.83.25.116 [US] triggered Cloudflare WAF (firewallCustom). Action taken: CHALLENGE ASN: 51765 (CREANOVA-AS Oy Creanova Hosting Solutions Ltd.) Protocol: HTTP/2 (method GET) Domain: api.sefinek.net Endpoint: /api/v2/moecounter/@nekosia-api-oRsj4TjLf8iq-production Timestamp: 2024-08-30T18:34:17Z Ray ID: 8bb6dfc5abebbfe4 Rule ID: cc5e7a6277d447eca9c1818934ba65c8 User agent: Mozilla/5.0 (Linux; Android 10; SM-F916U1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Mobile Safari/537.36 Report generated by Node-Cloudflare-WAF-AbuseIPDB (https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB) show less	Bad Web Bot
🇵🇱 sefinek.net	2024-08-30 14:44:08 (1 year ago)	This IP address has been identified as generating artificial traffic on websites following the purch ... show more This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/90.0.4430.85 Mobile/17B111 Safari/604.1 - - show less	Bad Web Bot
🇵🇱 sefinek.net	2024-08-30 14:44:08 (1 year ago)	This IP address has been identified as generating artificial traffic on websites following the purch ... show more This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/90.0.4430.85 Mobile/17B111 Safari/604.1 - - show less	Bad Web Bot
🇩🇪 SCHAPPY	2023-07-27 00:45:29 (2 years ago)	IP was involved in L7 DDoS attack.	DDoS Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 129.222.203.206

🇩🇪 94.101.34.113

🇺🇸 92.119.36.5

🇺🇦 91.237.122.39

🇧🇾 82.209.250.47

🇲🇲 37.111.53.110

🇳🇱 213.177.179.160

🇵🇪 190.102.139.52

🇮🇳 182.18.161.165

🇹🇭 150.95.25.110

🇬🇧 89.37.172.156

🇺🇸 71.6.239.39

🇮🇹 57.131.49.91

🇸🇬 47.128.127.51

🇭🇰 47.83.179.47

🇸🇬 43.173.173.245

🇳🇱 34.6.46.240

🇰🇷 211.46.188.16

🇮🇳 202.160.173.253

🇨🇳 121.18.49.14