JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 83.97.117.104

83.97.117.104 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 15%: ?

15%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 83.97.117.104

Whois 83.97.117.104

IP Abuse Reports for 83.97.117.104:

This IP address has been reported a total of 33 times from 15 distinct sources. 83.97.117.104 was first reported on April 10th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-22 09:44:15 (2 weeks ago)	(mod_security) mod_security (id:218580) triggered by 83.97.117.104 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218580) triggered by 83.97.117.104 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 05:44:08.781998 2026] [security2:error] [pid 31515:tid 31515] [client 83.97.117.104:53337] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\/\\\\[!+](?:[\\\\w\\\\s=_\\\\-()]+)?\\\\*\\\\/)" at ARGS:tree. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "74"] [id "218580"] [rev "1"] [msg "COMODO WAF: MySQL in-line comment detected.\|\|www.kountz.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.kountz.org"] [uri "/showrepo.php"] [unique_id "ahAlaHGNvPGWKxsNr6f3MQAAADM"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-05-11 18:54:30 (3 weeks ago)	IM360 WAF: SQL Injection via WordPress Link functionality MV:100EXTRACTVALUE(9538,CONCAT(0x7e,(SELEC ... show more IM360 WAF: SQL Injection via WordPress Link functionality MV:100EXTRACTVALUE(9538,CONCAT(0x7e,(SELECT/**/(ELT(9538=9538,1))),0x7e)) AND 1=1-- - show less	SQL Injection
🇺🇸 stechusa	2026-05-06 13:50:09 (1 month ago)	ELEVATED_THREAT \| country=US \| ASN=Alex Largman \| 9 IPs targeting /brand/hatch-transformers/transfor ... show more ELEVATED_THREAT \| country=US \| ASN=Alex Largman \| 9 IPs targeting /brand/hatch-transformers/transformers.html \| Sequential facet path walking detected (5 paths in order) \| Sequential facet path walking detected (6 paths in order) show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-05-06 13:50:09 (1 month ago)	[Askari] \| country=US \| Behavior: Concurrent page load during attack, No referrer on deep pages, HTT ... show more [Askari] \| country=US \| Behavior: Concurrent page load during attack, No referrer on deep pages, HTTP/1.1 over TLS, HTTP/1.1 only, Automated crawling show less	Bad Web Bot DDoS Attack
🇱🇻 garmtech.com	2026-04-11 16:34:42 (1 month ago)	IM360 WAF: RBL block risky actions MV:RBL lookup of 19-34.83.97.117.104.risky-actions.v2.rbl.imunify ... show more IM360 WAF: RBL block risky actions MV:RBL lookup of 19-34.83.97.117.104.risky-actions.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 myagent.site	2026-03-21 05:42:25 (2 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇩🇪 LRob.fr	2026-03-19 04:30:14 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-03-19 00:40:06 (2 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 myagent.site	2026-03-18 09:07:26 (2 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇫🇷 masterguru	2026-02-22 20:39:39 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 83.97.117.104 (FI/Finland/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 83.97.117.104 (FI/Finland/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-02-19 07:31:04 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 83.97.117.104 (FI/Finland/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 83.97.117.104 (FI/Finland/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-02-12 11:36:52 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 83.97.117.104 (FI/Finland/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 83.97.117.104 (FI/Finland/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇱🇻 garmtech.com	2025-12-30 00:46:07 (5 months ago)	IM360 WAF: RBL block risky actions MV:RBL lookup of 02-46.83.97.117.104.risky-actions.v2.rbl.imunify ... show more IM360 WAF: RBL block risky actions MV:RBL lookup of 02-46.83.97.117.104.risky-actions.v2.rbl.imunify.com. succeeded. show less	Web App Attack
🇩🇪 london2038.com	2025-07-09 11:21:51 (10 months ago)	Detected by WP fail2ban 2025-07-09T13:21:51.013439+02:00 localhost wordpress(<REDACTED>)[17033]: Aut ... show more Detected by WP fail2ban 2025-07-09T13:21:51.013439+02:00 localhost wordpress(<REDACTED>)[17033]: Authentication attempt for unknown user ?????????????????????? from 83.97.117.104 show less	Brute-Force Web App Attack
🇺🇸 nowyouknow	2025-06-15 01:40:51 (11 months ago)	(From [email protected]) While your competitors miss calls after hours, what if your business c ... show more (From [email protected]) While your competitors miss calls after hours, what if your business could serve customers and book appointments around the clock? Our voice AI technology does exactly this. You can even forward your current number, +1 603-238-9044, to the AI agent when you’re not open. I created a complimentary Voice AI demo for your business, all you have to do is click play and pretend to be someone calling your business. Want me to send it over? show less	Phishing Web Spam

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.102

🇺🇸 172.105.128.12

🇰🇷 112.219.151.50

🇨🇳 60.13.6.185

🇺🇸 45.79.181.94

🇳🇱 5.83.143.110

🇺🇸 2602:fa59:10:405::1

🇭🇰 223.197.186.7

🇩🇪 185.176.94.38

🇳🇱 178.16.55.50

🇺🇸 172.236.228.229

🇺🇸 172.236.228.198

🇮🇳 125.23.183.142

🇭🇰 118.26.36.248

🇭🇰 47.82.67.36

🇺🇿 5.133.121.104

🇺🇸 2607:f8b0:4001:c0c::12d

🇰🇷 211.195.151.169

🇺🇸 172.245.225.106

🇹🇭 171.100.121.127