JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 81.17.27.82

81.17.27.82 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 51%: ?

51%

ISP	CLIENT1060
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51852
Hostname(s)	hostedby.privatelayer.com
Domain Name	de-servers.com
Country	🇨🇭 Switzerland
City	Bellinzona, Ticino

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 81.17.27.82

Whois 81.17.27.82

IP Abuse Reports for 81.17.27.82:

This IP address has been reported a total of 13 times from 8 distinct sources. 81.17.27.82 was first reported on July 2nd 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-07-04 18:23:30 (4 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS	Web App Attack
🇱🇻 garmtech.com	2026-07-04 18:18:13 (4 days ago)	IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)	Web App Attack
🇪🇸 masterguru	2026-07-04 16:42:08 (4 days ago)	(xmlrpc) Failed xmlrpc access from 81.17.27.82 (CH/Switzerland/hostedby.privatelayer.com): 5 in the ... show more (xmlrpc) Failed xmlrpc access from 81.17.27.82 (CH/Switzerland/hostedby.privatelayer.com): 5 in the last 3600 secs (0-122) show less	Hacking
🇺🇸 TPI-Abuse	2026-07-04 13:38:27 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in t ... show more (mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 09:38:20.398616 2026] [security2:error] [pid 15286:tid 15286] [client 81.17.27.82:55577] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 81.17.27.82 (+1 hits since last alert)\|swinjury.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "swinjury.co"] [uri "/xmlrpc.php"] [unique_id "akkMzPmSw2wB4zsJ52-rsgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 12:07:23 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in t ... show more (mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 08:07:15.122438 2026] [security2:error] [pid 3351:tid 3351] [client 81.17.27.82:61110] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 81.17.27.82 (+1 hits since last alert)\|lakependoreillemobility.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lakependoreillemobility.com"] [uri "/xmlrpc.php"] [unique_id "akj3c8jby-Mdc5CxjR38nAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 11:34:33 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in t ... show more (mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 07:34:28.854646 2026] [security2:error] [pid 26510:tid 26510] [client 81.17.27.82:61776] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 81.17.27.82 (+1 hits since last alert)\|citizensforsanity.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "citizensforsanity.com"] [uri "/xmlrpc.php"] [unique_id "akjvxAoOaIgMQ-vXNukV9gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 applemooz	2026-07-04 10:20:38 (4 days ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
Anonymous	2026-07-03 21:40:40 (5 days ago)	Attac	Brute-Force
🇫🇮 YF	2026-07-03 20:01:16 (5 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2026-07-03 19:38:42 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in t ... show more (mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 15:38:35.334986 2026] [security2:error] [pid 22649:tid 22649] [client 81.17.27.82:52468] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 81.17.27.82 (+1 hits since last alert)\|nextlevelcharge.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nextlevelcharge.com"] [uri "/xmlrpc.php"] [unique_id "akgPuxsj_wXT0dQW1mz3AwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 17:38:54 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in t ... show more (mod_security) mod_security (id:240335) triggered by 81.17.27.82 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 13:38:49.404598 2026] [security2:error] [pid 2997:tid 2997] [client 81.17.27.82:53817] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 81.17.27.82 (+1 hits since last alert)\|vzan.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vzan.org"] [uri "/xmlrpc.php"] [unique_id "akfzqTwP5Wq0s1gLOMZLEgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-07-03 17:36:12 (5 days ago)	(wordpress) Failed wordpress login from 81.17.27.82 (CH/Switzerland/hostedby.privatelayer.com)	Brute-Force
🇫🇷 matthieul.dev	2026-07-02 04:05:20 (6 days ago)	Blocked by os-abuseipdb; 6 hits, proto=tcp,udp, ports=1540	Port Scan Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.223.107.86

🇷🇴 193.46.255.86

🇧🇷 181.213.83.78

🇳🇱 176.65.149.178

🇺🇸 172.172.131.149

🇯🇴 46.248.206.229

🇵🇱 45.38.215.120

🇳🇱 20.160.86.7

🇨🇳 218.95.73.31

🇧🇷 186.219.162.206

🇨🇳 106.13.56.235

🇩🇪 69.5.169.85

🇳🇱 45.148.10.147

🇪🇨 200.24.133.254

🇺🇸 198.199.123.188

🇺🇸 172.236.111.128

🇮🇩 103.186.167.2

🇸🇬 98.159.43.161

🇫🇷 85.217.140.32

🇭🇰 45.196.236.141