JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.111.247.138

77.111.247.138 was found in our database!

This IP was reported 163 times. Confidence of Abuse is 0%: ?

ISP	Opera Norway AS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205016
Domain Name	hernlabs.se
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.111.247.138

Whois 77.111.247.138

IP Abuse Reports for 77.111.247.138:

This IP address has been reported a total of 163 times from 68 distinct sources. 77.111.247.138 was first reported on December 3rd 2020, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 liveaspankaj	2026-04-04 22:32:36 (4 months ago)	DDoS attack: 112 requests in 5m (GET / or repair.php).	DDoS Attack
Anonymous	2026-01-27 01:05:38 (6 months ago)	Web attack	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-20 04:16:10 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 77.111.247.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 77.111.247.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 00:16:05.020333 2025] [security2:error] [pid 31544:tid 31544] [client 77.111.247.138:61785] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ncogtrains.com\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ncogtrains.com"] [uri "/wallet.backup"] [unique_id "aM4qhSniBrbQVJg4L3vSrgAAACE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2025-09-19 13:32:02 (11 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-09-17 11:46:17 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 77.111.247.138 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 77.111.247.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 07:46:14.525288 2025] [security2:error] [pid 24464:tid 24482] [client 77.111.247.138:47849] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|royaleconomicsacademy.com\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "royaleconomicsacademy.com"] [uri "/wallet.backup"] [unique_id "aMqfhoQHhee--qo_vcf5igAAAQ8"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-09-15 00:40:01 (11 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 77.111.247.138 (NO/Norway/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 77.111.247.138 (NO/Norway/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 nowyouknow	2025-06-16 01:03:48 (1 year ago)	(From [email protected]) Hello, This is Aubree with Vetted VAs. We connect businesses w ... show more (From [email protected]) Hello, This is Aubree with Vetted VAs. We connect businesses with Elite Virtual Assistants who can take over time-consuming tasks such as admin work, scheduling, CRM management, lead generation, social media, content writing, SEO, and even bookkeeping. Do you currently need support in any of these areas? show less	Phishing Web Spam
🇺🇸 etu brutus	2025-06-14 12:26:41 (1 year ago)	77.111.247.138 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇫🇷 IRISIO	2025-05-27 07:19:02 (1 year ago)	scans/SQL injection/spam posts : 6 queries	SQL Injection Web App Attack
Anonymous	2025-05-24 01:27:59 (1 year ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇫🇷 IRISIO	2025-05-23 08:21:59 (1 year ago)	scans/SQL injection/spam posts : 2 queries	SQL Injection Web App Attack
🇫🇷 IRISIO	2025-05-16 09:06:35 (1 year ago)	scans/SQL injection/spam posts : 2 queries	SQL Injection Web App Attack
🇨🇴 adalbertoreyes.org	2025-05-14 21:20:05 (1 year ago)	CategoryPortScan	Port Scan
Anonymous	2025-05-13 01:29:27 (1 year ago)	77.111.247.138 - - [13/May/2025:03:29:26 +0200] "GET /fckeditor/editor/filemanager/connectors/php/co ... show more 77.111.247.138 - - [13/May/2025:03:29:26 +0200] "GET /fckeditor/editor/filemanager/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=%2F HTTP/1.1" 403 4066 ... show less	Web App Attack
🇸🇪 SkyDancer	2025-05-07 05:40:25 (1 year ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇵 202.166.217.124

🇳🇱 13.73.142.239

🇳🇱 193.47.62.69

🇺🇸 172.86.114.38

🇰🇷 146.56.114.104

🇨🇳 119.108.89.57

🇨🇳 114.218.57.21

🇳🇱 91.92.241.57

🇩🇪 88.198.237.81

🇺🇸 72.90.84.62

🇨🇦 15.235.27.226

🇫🇷 193.70.43.199

🇳🇱 192.42.116.21

🇦🇷 181.45.24.31

🇸🇪 176.10.197.168

🇪🇨 160.20.164.235

🇷🇺 109.194.108.203

🇺🇸 109.105.210.89

🇨🇳 106.63.26.133

🇨🇳 58.42.204.29