JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 83.22.227.230

83.22.227.230 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 56%: ?

56%

ISP	Orange Polska Spolka Akcyjna
Usage Type	Fixed Line ISP
ASN	AS5617
Hostname(s)	83.22.227.230.ipv4.supernova.orange.pl
Domain Name	orange.com
Country	🇵🇱 Poland
City	Siedlce, Lesser Poland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 83.22.227.230

Whois 83.22.227.230

IP Abuse Reports for 83.22.227.230:

This IP address has been reported a total of 12 times from 9 distinct sources. 83.22.227.230 was first reported on August 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 konseptit	2026-08-21 06:26:10 (1 day ago)	(wordpress) Failed wordpress login from 83.22.227.230 (PL/Poland/83.22.227.230.ipv4.supernova.orange ... show more (wordpress) Failed wordpress login from 83.22.227.230 (PL/Poland/83.22.227.230.ipv4.supernova.orange.pl) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-20 09:11:46 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 83.22.227.230 (83.22.227.230.ipv4.supernova.ora ... show more (mod_security) mod_security (id:240335) triggered by 83.22.227.230 (83.22.227.230.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 05:11:41.676712 2026] [security2:error] [pid 10198:tid 10198] [client 83.22.227.230:58084] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 83.22.227.230 (+1 hits since last alert)\|yuichiro.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yuichiro.us"] [uri "/xmlrpc.php"] [unique_id "aobEzcBac705vYVQ3Z8UtgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-20 08:41:05 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 83.22.227.230 (83.22.227.230.ipv4.supernova.ora ... show more (mod_security) mod_security (id:240335) triggered by 83.22.227.230 (83.22.227.230.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 04:40:58.848064 2026] [security2:error] [pid 7341:tid 7341] [client 83.22.227.230:60134] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 83.22.227.230 (+1 hits since last alert)\|wsspy.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "wsspy.com"] [uri "/xmlrpc.php"] [unique_id "aoa9mg13nLwA4SvAKI33ywAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-20 00:27:36 (2 days ago)	[redacted] 83.22.227.230 - - [20/Aug/2026:02:26:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 83.22.227.230 - - [20/Aug/2026:02:26:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 83.22.227.230 - - [20/Aug/2026:02:27:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.1; http://site76888886.com" [redacted] 83.22.227.230 - - [20/Aug/2026:02:27:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.4; http://site13560539.com" [redacted] 83.22.227.230 - - [20/Aug/2026:02:27:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)" [redacted] 83.22.227.230 - - [20/Aug/2026:02:27:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.4; http://site15787661.com" ... show less	Hacking Web App Attack
🇩🇪 Marc	2026-08-19 22:24:51 (2 days ago)	83.22.227.230 - - [20/Aug/2026:00:24:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4671 "-" "Jetpack/12. ... show more 83.22.227.230 - - [20/Aug/2026:00:24:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4671 "-" "Jetpack/12.5; WordPress/6.4; http://site89719424.com" 83.22.227.230 - - [20/Aug/2026:00:24:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4671 "-" "Jetpack/12.5; WordPress/6.1; http://site58568573.com" 83.22.227.230 - - [20/Aug/2026:00:24:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4670 "-" "Jetpack by WordPress.com" show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-08-19 07:30:03 (3 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-19 06:31:48 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 83.22.227.230 (83.22.227.230.ipv4.supernova.ora ... show more (mod_security) mod_security (id:240335) triggered by 83.22.227.230 (83.22.227.230.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 02:31:40.344691 2026] [security2:error] [pid 25914:tid 25914] [client 83.22.227.230:61779] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 83.22.227.230 (+1 hits since last alert)\|keychainfilms.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "keychainfilms.com"] [uri "/xmlrpc.php"] [unique_id "aoVNzD3629rQppD-fi9lwwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-08-19 01:32:25 (3 days ago)	(wordpress) Failed wordpress login from 83.22.227.230 (PL/Poland/Lesser Poland/Krakow/83.22.227.230. ... show more (wordpress) Failed wordpress login from 83.22.227.230 (PL/Poland/Lesser Poland/Krakow/83.22.227.230.ipv4.supernova.orange.pl) show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-16 04:10:09 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 83.22.227.230 (83.22.227.230.ipv4.supernova.ora ... show more (mod_security) mod_security (id:240335) triggered by 83.22.227.230 (83.22.227.230.ipv4.supernova.orange.pl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 00:09:55.281218 2026] [security2:error] [pid 32496:tid 32496] [client 83.22.227.230:58165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 83.22.227.230 (+1 hits since last alert)\|vzan.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vzan.org"] [uri "/xmlrpc.php"] [unique_id "aoE4E_NIOLq9iB5HUNlxxwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Kenshin869	2026-08-16 03:04:01 (6 days ago)	Wordpress unauthorized access attempt	Brute-Force
🇩🇪 dbmwebdesign	2026-08-15 22:25:05 (6 days ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇮🇹 VHosting	2026-08-15 21:50:04 (6 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 202.165.17.230

🇲🇾 202.165.16.9

🇲🇾 202.165.15.132

🇨🇳 182.46.197.235

🇺🇸 172.68.174.246

🇦🇷 128.201.238.114

🇮🇳 103.191.89.252

🇺🇸 65.187.7.137

🇺🇸 34.197.70.90

🇩🇪 20.52.41.200

🇹🇷 212.174.62.233

🇮🇳 202.162.231.21

🇮🇩 202.162.204.250

🇻🇳 202.158.244.203

🇧🇪 198.235.24.174

🇦🇷 181.84.118.139

🇭🇰 165.154.23.177

🇲🇿 160.242.35.147

🇺🇸 147.185.132.182

🇮🇳 122.160.142.194