JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

83.142.54.59

Recent Activity

Abuse Confidence Score

5% Caution

22 reports

9 reporters · latest 13 hours ago

ISP: FINE GROUP SERVERS SOLUTIONS LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS26548
Domain Name: finegroupservers.com
Country: 🇺🇸 United States of America
City: New York City, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

22 from 9 distinct reporters

First reported

February 29th 2024

Most recent report

13 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 2

Most common categories Web App Attack 2 Brute-Force 2 Bad Web Bot 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-14 22:42:07 UTC · (13 hours ago)	(mod_security) mod_security (id:210350) triggered by 83.142.54.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:42:01.504451 2026] [security2:error] [pid 31433:tid 31433] [client 83.142.54.59:22231] Mod ... show more (mod_security) mod_security (id:210350) triggered by 83.142.54.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:42:01.504451 2026] [security2:error] [pid 31433:tid 31433] [client 83.142.54.59:22231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|lightningbug.farm\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightningbug.farm"] [uri "/wp-json/wp/v2/posts/204"] [unique_id "avjjuT9aoRCKIyoQLEVHHAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-29 13:51:03 UTC · (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 83.142.54.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:50:56.125990 2026] [security2:error] [pid 2998:tid 2998] [client 83.142.54.59:63995] ModSe ... show more (mod_security) mod_security (id:210350) triggered by 83.142.54.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:50:56.125990 2026] [security2:error] [pid 2998:tid 2998] [client 83.142.54.59:63995] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|arsenalfordemocracy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2016/10/03/building-toward-2018-and-2020/"] [unique_id "auNPQPQNX_OXIMwqszQyQgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-07-15 20:17:39 UTC · (3 months ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
🇫🇮 inlink.ltd	2026-05-26 05:22:13 UTC · (5 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 nowyouknow	2025-11-12 03:07:36 UTC · (1 year ago)	(From [email protected]) Hello, We’ve helped thousands of businesses worldwide improve their website accessibility, and after reviewing your site, we believe we can help you too. An inaccessible website can cost you customers — and even le ... show more (From [email protected]) Hello, We’ve helped thousands of businesses worldwide improve their website accessibility, and after reviewing your site, we believe we can help you too. An inaccessible website can cost you customers — and even lead to legal risks. We’re offering you an easy way to get started: - Free Accessibility Scan - Free Detailed Report - Free First Fix Get started now: http://scan4.free Best regards, The PLURO Team Should you wish to stop getting future communications from me, feel free to fill the form at bit. ly/fillunsubform with your domain address (URL). Zeppelinstrasse 71, Grand Island, CA, USA, 95035 show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-11-05 19:15:05 UTC · (1 year ago)	(From [email protected]) Hey, We reviewed your website: drjamieswellnesscenter.com and noticed accessibility gaps that need attention. Inaccessible sites don’t just lose clients — they also face growing legal risks. That’s why we’re offeri ... show more (From [email protected]) Hey, We reviewed your website: drjamieswellnesscenter.com and noticed accessibility gaps that need attention. Inaccessible sites don’t just lose clients — they also face growing legal risks. That’s why we’re offering you a free scan, a detailed report, and your first fix at no cost. Start your free scan today: http://scan4.free Best regards, The PLURO Team If you choose to opt-out of future communications from me, simply fill the form at bit. ly/fillunsubform with your domain address (URL). 27 Rue Marguerite, Argyle, CA, USA, 90540 show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-05-05 01:47:37 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 83.142.54.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 21:47:21.745978 2025] [security2:error] [pid 1095851:tid 1095851] [client 83.142.54.59:36423] ... show more (mod_security) mod_security (id:210492) triggered by 83.142.54.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 21:47:21.745978 2025] [security2:error] [pid 1095851:tid 1095851] [client 83.142.54.59:36423] [client 83.142.54.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theavgroup.com"] [uri "/1/wp-config.php.txt"] [unique_id "aBgYqbJ3QaEVe3GPZtoriAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇷 melizpr	2024-11-26 13:37:44 UTC · (1 year ago)	Log entry referencing 83.142.54.59	Brute-Force SSH
🇵🇷 melizpr	2024-11-26 04:00:00 UTC · (1 year ago)	Administrator terra login failed from https(83.142.54.59) because of invalid user name	Brute-Force SSH
🇳🇱 Roderic	2024-09-18 23:14:10 UTC · (2 years ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 83.142.54.59 (IL/Israel/-)	Bad Web Bot
Anonymous	2024-06-16 04:32:56 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-14 06:58:23 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-13 03:21:54 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-12 03:03:27 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-06-06 09:55:15 UTC · (2 years ago)	(mod_security) mod_security (id:225170) triggered by 83.142.54.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 06 05:55:10.719832 2024] [security2:error] [pid 902] [client 83.142.54.59:22807] [client 83.142. ... show more (mod_security) mod_security (id:225170) triggered by 83.142.54.59 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 06 05:55:10.719832 2024] [security2:error] [pid 902] [client 83.142.54.59:22807] [client 83.142.54.59] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|wpcoc.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wpcoc.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ZmGHfrKvDwMkCDm-53j-YgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇪 179.63.37.113

🇺🇸 66.132.195.80

🇧🇩 59.153.16.102

🇨🇳 222.210.35.197

🇭🇰 124.156.179.141

🇸🇬 43.160.215.200

🇫🇷 85.217.140.37

🇫🇷 82.102.18.180

🇭🇷 79.127.144.203

🇺🇸 70.174.176.7

🇳🇱 45.148.10.152

🇧🇦 31.223.152.253

🇰🇷 220.76.91.28

🇳🇱 195.178.110.232

🇧🇷 177.55.157.204

🇺🇸 170.106.39.6

🇺🇸 109.105.210.87

🇳🇱 86.38.187.80

🇺🇸 66.132.172.144

🇭🇰 65.181.79.60