JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 83.97.118.245

83.97.118.245 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 36%: ?

36%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 83.97.118.245

Whois 83.97.118.245

IP Abuse Reports for 83.97.118.245:

This IP address has been reported a total of 23 times from 15 distinct sources. 83.97.118.245 was first reported on June 28th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-19 19:28:27 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 83.97.118.245 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 83.97.118.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 15:28:18.449441 2026] [security2:error] [pid 1885:tid 1885] [client 83.97.118.245:23915] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|esad.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "esad.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atZvUrxZqxALtj8YwTPHPgAAAAI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Baking333	2026-10-19 16:58:15 (1 week ago)	[redacted] 83.97.118.245 - - [19/Oct/2026:17:58:11 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/2872 ... show more [redacted] 83.97.118.245 - - [19/Oct/2026:17:58:11 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/28727 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 80 [redacted] 83.97.118.245 - - [19/Oct/2026:17:58:14 +0100] "GET /wp-admin HTTP/1.1" 302 1517 0/25603 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 80 show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-10-19 08:17:23 (1 week ago)	[MonOct1910:17:19.1591772026][security2:error][pid829456:tid829550][client83.97.118.245:0]ModSecurit ... show more [MonOct1910:17:19.1591772026][security2:error][pid829456:tid829550][client83.97.118.245:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"domoticaswiss.ch\"][uri\"/xmlrpc.php\"][unique_id\"atXSD8_1Ji5vgDkvgEkbNAAAAMg\"] show less	Port Scan Brute-Force Web App Attack
🇸🇪 1337v411	2026-10-18 18:01:38 (1 week ago)	[2026-10-18T18:01:38+00:00] uri="/wp-json/wp/v2/users" ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebK ... show more [2026-10-18T18:01:38+00:00] uri="/wp-json/wp/v2/users" ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇫🇮 JimArchon72	2026-10-10 02:15:04 (2 weeks ago)	2026/10/10 02:14:30 "GET /wp-login.php?action=register HTTP/1.1"	Web App Attack
🇨🇿 Countryman	2026-09-14 00:10:01 (1 month ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 lp	2026-09-13 01:51:30 (1 month ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.118.245 2026-09-13T02:57:32+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.118.245 2026-09-13T02:57:32+02:00 vpn Access-Reject 'claudia.fiscal' station: 83.97.118.245 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2026-09-07 23:49:59 (1 month ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇩🇪 zerodaysystemde	2026-08-24 21:47:57 (2 months ago)	Port (443 tcp) Scanner - WEB - HoneyPot	Port Scan
Anonymous	2026-07-14 05:15:33 (3 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 mw	2026-07-02 09:51:31 (3 months ago)	VPN bruteforce	Brute-Force
🇩🇪 Oakley	2026-05-25 14:52:40 (5 months ago)	(mod_security) mod_security (id:900177) triggered by 83.97.118.245 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:900177) triggered by 83.97.118.245 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-05-13 20:07:37 (5 months ago)	(mod_security) mod_security (id:211030) triggered by 83.97.118.245 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:211030) triggered by 83.97.118.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 16:07:30.463445 2026] [security2:error] [pid 29962:tid 29962] [client 83.97.118.245:61811] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack\|\|www.genesis-castle.com\|F\|2"] [data "Matched Data: ('~'\|\|( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/index.php"] [unique_id "agTaAtC_QIPDRQjLxcuqZgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-12 10:21:25 (5 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-06 14:25:33 (5 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 165.22.19.111

🇸🇬 150.109.16.200

🇮🇳 103.60.211.244

🇺🇸 47.89.230.8

🇫🇷 217.60.184.2

🇺🇸 212.119.47.27

🇧🇷 187.58.241.90

🇳🇱 185.14.30.133

🇵🇰 182.188.24.243

🇺🇸 162.216.150.115

🇮🇳 159.65.149.131

🇺🇸 144.172.105.154

🇺🇸 93.152.85.2

🇷🇴 92.118.39.14

🇺🇦 91.231.41.119

🇨🇳 47.121.131.108

🇺🇸 45.146.55.227

🇩🇪 18.185.135.112

🇦🇺 3.26.153.167

🇮🇩 202.145.0.18