JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 83.97.117.181

83.97.117.181 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 4%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇵🇱 Poland
City	Gdansk, Pomerania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 83.97.117.181

Whois 83.97.117.181

IP Abuse Reports for 83.97.117.181:

This IP address has been reported a total of 19 times from 13 distinct sources. 83.97.117.181 was first reported on June 24th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-06-21 22:21:20 (2 days ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-06-20 01:34:55 (3 days ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-04-16 07:45:36 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 83.97.117.181 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 83.97.117.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 03:45:28.786557 2026] [security2:error] [pid 2479424:tid 2479424] [client 83.97.117.181:34921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|puoci.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puoci.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeCTmBS88aepaOKhHYJjkwAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-04-09 06:58:11 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-01-28 06:51:13 (4 months ago)	(mod_security) mod_security (id:240335) triggered by 83.97.117.181 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 83.97.117.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 28 01:51:06.351500 2026] [security2:error] [pid 9812:tid 9812] [client 83.97.117.181:58979] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 83.97.117.181 (+1 hits since last alert)\|thestardance.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thestardance.com"] [uri "/xmlrpc.php"] [unique_id "aXmx2vgfverD8-KqZ1watAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 rsiddall	2026-01-24 03:37:12 (4 months ago)	83.97.117.181 - - [23/Jan/2026:22:37:10 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "curl/8.6.0" ... show more 83.97.117.181 - - [23/Jan/2026:22:37:10 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "curl/8.6.0" 83.97.117.181 - - [23/Jan/2026:22:37:11 -0500] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "curl/8.6.0" ... show less	Brute-Force
🇫🇷 masterguru	2026-01-18 05:11:38 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 83.97.117.181 (FI/Finland/-): 1 in the last 36 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 83.97.117.181 (FI/Finland/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇪🇸 robotstxt	2026-01-15 21:37:59 (5 months ago)	83.97.117.181 - - [15/Jan/2026:21:37:52 +0000] "POST /wp-login.php_/xmlrpc.php HTTP/1.1" 404 48148 " ... show more 83.97.117.181 - - [15/Jan/2026:21:37:52 +0000] "POST /wp-login.php_/xmlrpc.php HTTP/1.1" 404 48148 "-" "curl/8.6.0" "-" 83.97.117.181 - - [15/Jan/2026:21:37:53 +0000] "POST /wp-login.php_/xmlrpc.php HTTP/1.1" 404 48145 "-" "curl/7.88.1" "-" 83.97.117.181 - - [15/Jan/2026:21:37:55 +0000] "POST /wp-login.php_/xmlrpc.php HTTP/1.1" 404 48146 "-" "Wget/1.21.4" "-" 83.97.117.181 - - [15/Jan/2026:21:37:52 +0000] "POST /wp-login.php_/xmlrpc.php HTTP/1.1" 404 48148 "-" rt="0.522" "curl/8.6.0" "-" h="economipedia.com" sn="economipedia.com" ru="/wp-login.php_/xmlrpc.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia83.sock" us="404" uct="0.000" urt="0.387" 83.97.117.181 - - [15/Jan/2026:21:37:53 +0000] "POST /wp-login.php_/xmlrpc.php HTTP/1.1" 404 48145 "-" rt="0.549" "curl/7.88.1" "-" h="economipedia.com" sn="economipedia.com" ru="/wp-login.php_/xmlrpc.php" u="/index.php" ucs="-" ua="unix:/var/run/php/economipedia83.sock" us="404" uct="0.000" urt="0.409" ... show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-11-17 16:50:30 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-15 17:11:21 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 83.97.117.181 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 83.97.117.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 12:11:12.817998 2025] [security2:error] [pid 16188:tid 16188] [client 83.97.117.181:26711] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|zorina.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "zorina.com"] [uri "/"] [unique_id "aRi0MNXoQHOZp19qPhRQAgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 France Artisanat	2025-06-25 14:23:26 (11 months ago)	Skyrocket Your Website Traffic with AI	Web Spam
🇨🇿 lp	2025-05-15 18:21:11 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.117.181 2025-05-15T20:13:22+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.117.181 2025-05-15T20:13:22+02:00 vpn Access-Reject 'bellpull' station: 83.97.117.181 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-20 16:30:27 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.117.181 2025-03-20T16:17:12+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.117.181 2025-03-20T16:17:12+01:00 vpn Access-Reject 'Administrator' station: 83.97.117.181 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-18 17:55:49 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.117.181 2025-03-18T18:37:24+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.117.181 2025-03-18T18:37:24+01:00 vpn Access-Reject 'karim' station: 83.97.117.181 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-02-04 05:50:25 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.117.181 2025-02-04T06:38:49+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.117.181 2025-02-04T06:38:49+01:00 vpn Access-Reject 'nontranscribing' station: 83.97.117.181 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.231

🇺🇸 185.247.208.88

🇮🇳 154.84.242.115

🇫🇮 147.185.133.94

🇨🇳 113.194.203.31

🇺🇸 45.132.115.25

🇺🇸 44.46.141.29

🇩🇪 8.211.7.35

🇨🇳 223.223.199.221

🇹🇼 211.75.252.252

🇧🇷 187.180.147.24

🇺🇸 64.62.197.106

🇱🇹 62.60.130.238

🇺🇸 50.6.197.105

🇲🇾 49.125.201.85

🇺🇸 44.154.7.194

🇺🇸 38.43.93.185

🇬🇧 35.203.210.222

🇺🇸 34.224.31.22

🇺🇸 34.23.1.95