JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.83.25.81

77.83.25.81 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 15%: ?

15%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.83.25.81

Whois 77.83.25.81

IP Abuse Reports for 77.83.25.81:

This IP address has been reported a total of 14 times from 10 distinct sources. 77.83.25.81 was first reported on July 7th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-21 02:15:42 (1 day ago)	Not following 301 redirects — wasted requests \| method: HEAD \| path: / \| ua: Mozilla/5.0 (Windows NT ... show more Not following 301 redirects — wasted requests \| method: HEAD \| path: / \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-15 13:08:02 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 77.83.25.81 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 77.83.25.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:07:54.587613 2026] [security2:error] [pid 14072:tid 14134] [client 77.83.25.81:9583] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|daydreambeliever.us\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "daydreambeliever.us"] [uri "/page56.htm"] [unique_id "atDQKpaz1HrkeGRg3yXpkQAAAVA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 12:46:39 (1 week ago)	(mod_security) mod_security (id:210350) triggered by 77.83.25.81 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 77.83.25.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:46:34.591007 2026] [security2:error] [pid 1332:tid 1337] [client 77.83.25.81:14901] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|thecraftsycat.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thecraftsycat.com"] [uri "/category/ice-cream/"] [unique_id "atDLKmuLALSxK1v3p5x8PgAAAUE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-07 15:44:06 (2 months ago)		Brute-Force SSH
🇧🇾 lns.bz	2026-08-06 21:32:25 (2 months ago)	SSH bruteforce [BY]	SSH
🇮🇹 alph44	2026-08-05 23:41:13 (2 months ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇩🇪 Bigbear3	2026-08-05 19:29:12 (2 months ago)	Report-by-bigbear3	Brute-Force SSH
🇬🇧 Oakley	2026-07-04 15:51:58 (3 months ago)	(mod_security) mod_security (id:900178) triggered by 77.83.25.81 (US/United States/-): 5 in the last ... show more (mod_security) mod_security (id:900178) triggered by 77.83.25.81 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇫🇷 masterguru	2026-06-16 09:00:42 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 77.83.25.81 (UA/Ukraine/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 77.83.25.81 (UA/Ukraine/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-06-16 07:49:15 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 77.83.25.81 (UA/Ukraine/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 77.83.25.81 (UA/Ukraine/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇬🇧 Oakley	2026-06-11 06:55:09 (4 months ago)	(mod_security) mod_security (id:900177) triggered by 77.83.25.81 (US/United States/-): 5 in the last ... show more (mod_security) mod_security (id:900177) triggered by 77.83.25.81 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇫🇷 Tilellit.PRO	2026-02-12 02:49:27 (8 months ago)	Fail2Ban banned 77.83.25.81 for security violations in jail wp-armour. Log: 2026/02/12 02:49:26 [err ... show more Fail2Ban banned 77.83.25.81 for security violations in jail wp-armour. Log: 2026/02/12 02:49:26 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 77.83.25.81 \| Target: wplogin" , client: 77.83.25.81, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 Tilellit.PRO	2026-02-06 18:37:29 (8 months ago)	Fail2Ban banned 77.83.25.81 for security violations in jail wp-armour. Log: 2026/02/06 18:37:29 [err ... show more Fail2Ban banned 77.83.25.81 for security violations in jail wp-armour. Log: 2026/02/06 18:37:29 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 77.83.25.81 \| Target: wplogin" , client: 77.83.25.81, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
Anonymous	2024-07-07 01:26:08 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.154

🇺🇸 147.185.132.130

🇻🇳 118.70.125.152

🇨🇿 109.238.212.91

🇮🇳 66.116.253.71

🇫🇮 185.89.43.245

🇨🇴 179.33.78.106

🇺🇸 129.121.140.234

🇻🇳 101.99.37.80

🇺🇸 98.122.215.23

🇺🇸 70.184.126.19

🇺🇸 69.166.109.247

🇳🇱 45.148.10.141

🇺🇸 24.234.101.186

🇷🇴 2.57.122.238

🇰🇷 125.182.93.87

🇬🇧 104.248.174.159

🇬🇧 35.203.210.181

🇧🇪 34.140.132.132

🇳🇱 204.76.203.4