JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.83.27.25

77.83.27.25 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 16%: ?

16%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.83.27.25

Whois 77.83.27.25

IP Abuse Reports for 77.83.27.25:

This IP address has been reported a total of 12 times from 7 distinct sources. 77.83.27.25 was first reported on November 3rd 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-03 23:48:29 (13 hours ago)	(mod_security) mod_security (id:210730) triggered by 77.83.27.25 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 77.83.27.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 19:48:23.223226 2026] [security2:error] [pid 32222:tid 32222] [client 77.83.27.25:34361] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lochmere II Recliner/Broughton Saddle/Thumbs.db"] [unique_id "akhKR_pZ20WcOdCA8Y2QigAAAA0"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lochmere%20II%20Recliner/Broughton%20Saddle/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 04:55:00 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 77.83.27.25 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 77.83.27.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 00:54:53.392944 2026] [security2:error] [pid 19804:tid 19804] [client 77.83.27.25:14099] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Bailey/Thumbs.db"] [unique_id "ah-znXTAydh7ICEBN20hMAAAAAk"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Bailey/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-05-31 12:32:25 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/bf2019/bf-headlight/bmw-f30 ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/bf2019/bf-headlight/bmw-f30-led-headlight-dtm-angel-eyes.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.3311.77 Safari/537.36') show less	Web App Attack Exploited Host
🇱🇻 garmtech.com	2026-05-11 07:09:57 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-09.77.83.27.25.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-09.77.83.27.25.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-07 23:47:58 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-47.77.83.27.25.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-47.77.83.27.25.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-07 02:32:46 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-32.77.83.27.25.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-32.77.83.27.25.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 HandyTreff.de	2026-05-01 16:12:39 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.376 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -54.376 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.991.83 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-30 23:41:53 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 77.83.27.25 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 77.83.27.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 19:41:46.269199 2026] [security2:error] [pid 12784:tid 12784] [client 77.83.27.25:29475] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wurkroom.biz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wurkroom.biz"] [uri "/wp-json/wp/v2/users"] [unique_id "afPouk6iGF_1DcAv4lQYSgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-29 05:21:00 (2 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-28 16:35:49 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 77.83.27.25 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 77.83.27.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 12:35:44.279147 2026] [security2:error] [pid 24479:tid 24479] [client 77.83.27.25:23247] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mardensmith.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mardensmith.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afDh4EPJ3iovxptb0S8O3QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-04-24 17:54:51 (2 months ago)	(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 77.83.27.25 (US/United States/-): 1 in the la ... show more (bot_kill_mega) Aggressive Bot Blocked: Go-http-client 77.83.27.25 (US/United States/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 77.83.27.25 - - [24/Apr/2026:20:54:42 +0300] "POST /xmlrpc.php HTTP/2.0" 403 86 "-" "Go-http-client/2.0" show less	Port Scan
🇵🇱 rafix	2023-11-03 06:58:53 (2 years ago)	Scrapping website, using diffrent useragents, not wait for response, #botnet20231026	DDoS Attack Bad Web Bot

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 35.213.70.61

🇵🇰 223.123.65.97

🇺🇸 206.189.174.93

🇬🇧 193.163.125.116

🇨🇦 85.217.149.24

🇸🇳 41.82.50.218

🇺🇸 20.15.162.238

🇲🇾 183.171.154.29

🇺🇸 162.216.150.148

🇬🇧 154.16.44.203

🇺🇸 44.243.79.20

🇷🇴 2.57.121.25

🇰🇷 222.107.156.227

🇳🇱 195.178.110.227

🇳🇱 91.92.40.233

🇬🇧 83.166.165.98

🇷🇴 80.94.95.226

🇺🇸 44.6.149.43

🇮🇸 216.86.171.170

🇨🇳 180.153.236.112