JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 83.97.119.132

83.97.119.132 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 28%: ?

28%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 83.97.119.132

Whois 83.97.119.132

IP Abuse Reports for 83.97.119.132:

This IP address has been reported a total of 29 times from 17 distinct sources. 83.97.119.132 was first reported on January 22nd 2023, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 oncord	2026-08-30 22:36:00 (22 hours ago)	Form spam	Web Spam
🇳🇱 maxxsense	2026-08-29 10:29:08 (2 days ago)	(wordpress) Failed wordpress login from 83.97.119.132 (US/United States/-)	Brute-Force
🇦🇺 oncord	2026-08-28 17:30:21 (3 days ago)	Form spam	Web Spam
🇦🇺 oncord	2026-08-25 07:58:09 (6 days ago)	Form spam	Web Spam
🇩🇪 4server	2026-08-25 00:08:02 (6 days ago)	[TueAug2502:07:59.9412542026][security2:error][pid1737321:tid1737427][client83.97.119.132:0]ModSecur ... show more [TueAug2502:07:59.9412542026][security2:error][pid1737321:tid1737427][client83.97.119.132:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"[\\\\\\\\n\\\\\\\\r]\"atARGS_GET:messaggio.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"143\"][id\"390722\"][rev\"5\"][msg\"Atomicorp.comWAFRules:HTTPHeaderInjectionAttackviapayload\(CR/LFdetected\)\"][data\"MatchedData:\\\\x0dfoundwithinARGS_GET:messaggio:RTX5000andRX9000seriescardsarefloodingsearchresults\,whilebuyersareactivelyresearchingbeforepurchasing.FPSBenchtrackseachnewGPUreleaseusingrealFPSdataacrossgames\,Passmark\,3DMarkandadditionalbenchmarks\,validatedbyadedicatedgroupofhardwarespecialists.\\\\x0d\\\\x0a\\\\x0d\\\\x0ahttps://qmy.li/gpus\\\\x0d\\\\x0a\\\\x0d\\\\x0aIfyourcontentcoversgraphicscards\,PCgaming\,orhardwarerecommendations\,addingareferencegivesyouraudienc...\"][severity\"CRITICAL\"][hostname\"morgenstern-swiss.ch\"][uri\"/contact.html\"][unique_id\"aozc34fMaDID2blf-W695QAAANQ\"]\,referer:http://morgenstern-swis show less	Port Scan Brute-Force Web App Attack
🇦🇺 oncord	2026-08-22 15:19:52 (1 week ago)	Form spam	Web Spam
🇫🇮 JimArchon72	2026-08-03 12:00:12 (4 weeks ago)	2026/08/03 11:59:22 "GET /wp-login.php?action=register HTTP/1.1"	Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 20:14:33 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 83.97.119.132 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 83.97.119.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:14:28.565328 2026] [security2:error] [pid 32463:tid 32463] [client 83.97.119.132:20869] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|opennatura.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "opennatura.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai8LpOFxdOpw1-sEpK70_AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-06-07 21:57:56 (2 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇩🇪 nyt	2026-05-22 01:33:10 (3 months ago)	WP Config Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-05-21 17:20:09 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 83.97.119.132 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 83.97.119.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 13:20:00.369959 2026] [security2:error] [pid 30387:tid 30387] [client 83.97.119.132:56983] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigheartskitchen.net"] [uri "/wp-config.php.orig"] [unique_id "ag8-wHvRAmScPAgzYfYO6AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 20:44:11 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 83.97.119.132 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 83.97.119.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 16:44:05.379772 2026] [security2:error] [pid 29607:tid 29607] [client 83.97.119.132:52067] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.geckoturner.chezlubacov.xyz\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.geckoturner.chezlubacov.xyz"] [uri "/wp-config.inc"] [unique_id "ag4dFXFkMnwTjuiZRnsCFAAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 NicoID	2026-05-02 00:10:05 (3 months ago)	83.97.119.132 - - [01/May/2026:00:30:25 -0600] "POST /wp-login.php HTTP/1.1" 200 5830 "-" "Mozilla/5 ... show more 83.97.119.132 - - [01/May/2026:00:30:25 -0600] "POST /wp-login.php HTTP/1.1" 200 5830 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force
🇮🇩 sockominfo	2026-02-05 23:00:31 (6 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-05 22:36:37 (6 months ago)	[WAZUH] Mixed case extension detected (case variation bypass)	Hacking Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.116

🇨🇦 209.50.188.34

🇺🇸 206.189.224.192

🇱🇻 185.69.25.20

🇸🇬 152.42.189.43

🇯🇵 129.225.165.169

🇺🇸 91.230.168.191

🇹🇷 88.235.212.12

🇲🇦 41.251.210.6

🇮🇳 27.107.145.226

🇺🇸 20.65.178.67

🇺🇸 216.25.89.70

🇺🇸 205.210.31.19

🇺🇸 162.216.149.76

🇺🇸 157.230.180.149

🇦🇴 105.168.51.189

🇩🇪 104.207.58.28

🇹🇷 78.190.16.155

🇬🇧 45.82.76.109

🇺🇸 35.185.85.68