JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

83.165.115.198

Neutral Activity

Abuse confidence score ?

0% Low Risk

28 reports

18 reporters · latest 1 year ago

ISP	R Cable y Telecomunicaciones Galicia S.A.
Usage Type	Fixed Line ISP
ASN	AS15704
Hostname(s)	198.115.165.83.dynamic.reverse-mundo-r.com
Domain Name	mundo-r.com
Country	🇪🇸 Spain
City	Bilbao, Basque Country

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

83.165.115.198 has been reported 28 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 83.165.115.198

This IP address has been reported a total of 28 times from 18 distinct sources. 83.165.115.198 was first reported on May 9th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Interceptor_HQ	2025-05-27 16:09:29 (1 year ago)	request_uri: /xmlrpc.php -- automatic report --	Hacking Brute-Force
🇪🇪 Unwasted	2025-05-27 09:53:51 (1 year ago)	File scanning	Hacking Web App Attack
Anonymous	2025-05-20 16:57:57 (1 year ago)	XMLRPC Hack Attempts	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-05-20 16:09:38 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse- ... show more (mod_security) mod_security (id:225170) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse-mundo-r.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 20 12:09:35.092804 2025] [security2:error] [pid 3222050:tid 3222050] [client 83.165.115.198:63965] [client 83.165.115.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cajunpicasso.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cajunpicasso.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aCypP_IiDaV9rtG6jOKfewAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-20 13:58:30 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-05-20 13:29:11 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse- ... show more (mod_security) mod_security (id:225170) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse-mundo-r.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 20 09:29:07.182458 2025] [security2:error] [pid 4188166:tid 4188166] [client 83.165.115.198:65223] [client 83.165.115.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|richmondrents.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "richmondrents.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aCyDoyotVIuSUJ4c-7aRlwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-20 09:16:13 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse- ... show more (mod_security) mod_security (id:225170) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse-mundo-r.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 20 05:16:06.877151 2025] [security2:error] [pid 138114:tid 138114] [client 83.165.115.198:64133] [client 83.165.115.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|konahawaii.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "konahawaii.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aCxIVhYyjs0K_gvhUHswLAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2025-05-20 04:06:56 (1 year ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇩🇪 grassau.com	2025-05-19 18:18:14 (1 year ago)	(wordpress) Failed wordpress login from 83.165.115.198 (198.115.165.83.dynamic.reverse-mundo-r.com)	Brute-Force
🇧🇷 RocketEmi	2025-05-19 13:21:09 (1 year ago)	Intento de hackeo	Brute-Force
🇩🇪 nextweb	2025-05-19 11:25:36 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 83.165.115.198 (ES/Spain/Madrid/Alcalá de Henar ... show more (mod_security) mod_security (id:240335) triggered by 83.165.115.198 (ES/Spain/Madrid/Alcalá de Henares/198.115.165.83.dynamic.reverse-mundo-r.com/[AS15704 Xtra Telecom S.A.]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇺🇸 TPI-Abuse	2025-05-18 21:14:07 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse- ... show more (mod_security) mod_security (id:225170) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse-mundo-r.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 18 17:14:01.673775 2025] [security2:error] [pid 2561648:tid 2561648] [client 83.165.115.198:64447] [client 83.165.115.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|davidharrisgriffith.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "davidharrisgriffith.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aCpNmb3-h8KWUJxMgWjyPAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-18 09:11:47 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse- ... show more (mod_security) mod_security (id:240335) triggered by 83.165.115.198 (198.115.165.83.dynamic.reverse-mundo-r.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 18 05:11:44.192330 2025] [security2:error] [pid 2327871:tid 2327871] [client 83.165.115.198:63409] [client 83.165.115.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 83.165.115.198 (+1 hits since last alert)\|bitcointoolshop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bitcointoolshop.com"] [uri "/xmlrpc.php"] [unique_id "aCmkUAIyaTbNZWx-YA8mCQAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2025-05-18 08:39:44 (1 year ago)	Fail2Ban apache-tripwires	Web App Attack
🇳🇱 MM-bot	2025-05-17 22:26:31 (1 year ago)	URL-probe: HTTP/1.1 POST request on /xmlrpc.php (2025-05-18 00:26:31 UTC+2)	Hacking Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.46.255.86

🇲🇾 47.250.161.156

🇫🇮 45.87.249.147

🇩🇪 213.209.159.241

🇨🇴 190.25.75.206

🇺🇸 172.206.242.255

🇩🇪 167.94.146.52

🇸🇬 167.71.199.141

🇨🇦 165.227.45.141

🇮🇳 152.58.79.221

🇺🇸 134.199.210.20

🇲🇽 46.250.171.200

🇦🇺 45.132.224.125

🇺🇸 20.55.91.192

🇺🇸 216.218.206.67

🇩🇪 213.209.159.133

🇩🇪 164.92.182.157

🇫🇷 91.231.89.73

🇳🇱 91.92.42.63

🇬🇧 64.227.41.39