JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

77.242.21.67

Recent Activity

Abuse Confidence Score

42% Elevated

51 reports

26 reporters · latest 2 hours ago

ISP: Abissnet sh.a.
Usage Type: Fixed Line ISP
ASN: AS35047
Hostname(s): ip-77-242-21-67.net.abissnet.al
Domain Name: abissnet.al
Country: 🇦🇱 Albania
City: Durres, Durres County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

51 from 26 distinct reporters

First reported

July 27th 2025

Most recent report

2 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 15 🇨🇭 Switzerland 2 🇩🇪 Germany 1

Most common categories Bad Web Bot 16 DDoS Attack 7 Exploited Host 3 Brute-Force 2 Web App Attack 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-11-15 19:49:22 UTC · (2 hours ago)	(mod_security) mod_security (id:225080) triggered by 77.242.21.67 (ip-77-242-21-67.net.abissnet.al): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:49:17.066119 2026] [security2:error] [pid 31951:tid 32047] [ ... show more (mod_security) mod_security (id:225080) triggered by 77.242.21.67 (ip-77-242-21-67.net.abissnet.al): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:49:17.066119 2026] [security2:error] [pid 31951:tid 32047] [client 77.242.21.67:60778] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.fastestcopyright.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fastestcopyright.com"] [uri "/wp-includes/js/dist/"] [unique_id "avoMvTNTjarrC1HnkMmxIAAAARI"], referer: https://www.fastestcopyright.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-11-11 02:51:22 UTC · (4 days ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5D=36&topics%5B4%5D=67&topics%5B5%5D=81&topics%5B6%5D=57 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5D=36&topics%5B4%5D=67&topics%5B5%5D=81&topics%5B6%5D=57 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 justbible	2026-11-10 16:50:20 UTC · (5 days ago)	HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 2 requests from 2026-11-10T16:50:20+00:00 to 2026-11-11T13:00:38+00:00, e.g. 'GET /en/kjv,original,lsv,bbe,asv/jude/1 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; ... show more HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 2 requests from 2026-11-10T16:50:20+00:00 to 2026-11-11T13:00:38+00:00, e.g. 'GET /en/kjv,original,lsv,bbe,asv/jude/1 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested). show less	Bad Web Bot
🇨🇭 backslash	2026-11-09 00:12:00 UTC · (6 days ago)	block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB	Bad Web Bot
🇺🇸 pixelmemory.us	2026-11-01 00:50:26 UTC · (2 weeks ago)	2026-11-01T00:48:20 77.242.21.67 GET /Photos/Vacation/2012-11-22%20Hwy%20108/raw/IMG_0841.CR2.xmp Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36 ...	Bad Web Bot
🇺🇸 kosada.com	2026-10-30 01:34:22 UTC · (2 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=54&topics%5B1%5D=50&topics%5B2%5D=25&topics%5B3%5D=45 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=54&topics%5B1%5D=50&topics%5B2%5D=25&topics%5B3%5D=45 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
Anonymous	2026-10-21 21:04:10 UTC · (3 weeks ago)	Distributed web scraper targeting /store/filtered/ on linwoodplaza.linwood.wine. Residential proxy - IP+timestamp provided for ISP DHCP log attribution.	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-10-19 08:12:11 UTC · (3 weeks ago)	Distributed web scraper targeting /store/filtered/ on linwoodplaza.linwood.wine. Residential proxy - IP+timestamp provided for ISP DHCP log attribution.	DDoS Attack Bad Web Bot Exploited Host
🇷🇸 pavel Karpenko	2026-10-11 20:42:47 UTC · (1 month ago)	77.242.21.67 - - [11/Oct/2026:23:42:47 +0300] "GET /captcha-check.php?r=eyJ2IjoxLCJwYXRoIjoiL3RyYW5zZmVyLz9jb2RlPUZSJmNvbXBhbnk9TWlzdHJhbCtBSStTQVMmY29tcGFueV9jb3VudHJ5PUZSJmNvdW50ZXJwYXJ0eT1Tb2x2YXkrU0EmY291bnRlcnBhcnR5X2NvdW50cnk9QkUmY291bnRyeT1GUi ... show more 77.242.21.67 - - [11/Oct/2026:23:42:47 +0300] "GET /captcha-check.php?r=eyJ2IjoxLCJwYXRoIjoiL3RyYW5zZmVyLz9jb2RlPUZSJmNvbXBhbnk9TWlzdHJhbCtBSStTQVMmY29tcGFueV9jb3VudHJ5PUZSJmNvdW50ZXJwYXJ0eT1Tb2x2YXkrU0EmY291bnRlcnBhcnR5X2NvdW50cnk9QkUmY291bnRyeT1GUiZsYW5nPXBsJnNjb3BlPXJpcGVfdG8mc2hhcmU9NDhkMDQyYzJmNjlkMGRkYSZ2aWV3PXBhaXIiLCJ2aXNpdG9yIjoiYjVhYmM0MWJiZWRmZTk0ZDk5NDBlMTQ2NzBhNDZjM2EiLCJleHAiOjE3OTE3NTE5NjR9.oJWDgpWhK7tDfJK08Y7FGz5mYOgaMgiLGfh56oR-Juo HTTP/2.0" 403 77 "https://ultralir.com/transfer/?code=FR&company=Mistral+AI+SAS&company_country=FR&counterparty=Solvay+SA&counterparty_country=BE&country=FR&lang=pl&scope=ripe_to&share=48d042c2f69d0dda&view=pair" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" client_port=33310 server_port=443 rt=0.001 urt=0.001 transfer_entry=- server_addr=195.133.18.6 epoch=1791751367.184 show less	DDoS Attack
🇩🇪 netclix.gr	2026-10-06 21:26:30 UTC · (1 month ago)	(old_win_chrome) Blocked old Windows Chrome 77.242.21.67 (AL/Albania/ip-77-242-21-67.net.abissnet.al): (CF_ENABLE)	Hacking
🇺🇸 TPI-Abuse	2026-10-05 22:30:23 UTC · (1 month ago)	(mod_security) mod_security (id:210350) triggered by 77.242.21.67 (ip-77-242-21-67.net.abissnet.al): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 18:30:18.450563 2026] [security2:error] [pid 22910:tid 22910] [ ... show more (mod_security) mod_security (id:210350) triggered by 77.242.21.67 (ip-77-242-21-67.net.abissnet.al): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 18:30:18.450563 2026] [security2:error] [pid 22910:tid 22910] [client 77.242.21.67:54932] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|pdonato.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pdonato.com"] [uri "/"] [unique_id "asQk-vCa2BLFFe_asxTO9wAAABM"], referer: https://strongestbacklinks.space/dir/seo-link-acquisition-159751 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-10-02 12:03:16 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0	Bad Web Bot
🇺🇸 鬼影233	2026-10-01 07:27:14 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-10-01 00:36:58 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 kosada.com	2026-09-29 17:51:30 UTC · (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=54&topics%5B2%5D=66&topics%5B3%5D=25&topics%5B4%5D=33 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/6 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=54&topics%5B2%5D=66&topics%5B3%5D=25&topics%5B4%5D=33 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15") show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 222.210.35.197

🇩🇪 207.180.6.98

🇮🇩 202.158.36.50

🇺🇦 152.89.22.128

🇮🇳 134.209.156.252

🇳🇱 45.148.10.157

🇳🇱 45.148.10.152

🇺🇸 2604:a880:400:d1:0:5:6d58:6001

🇧🇷 201.86.42.211

🇻🇪 200.82.227.17

🇺🇸 185.191.171.6

🇱🇹 141.98.11.215

🇨🇳 123.122.32.42

🇩🇪 109.160.32.107

🇻🇬 103.47.145.66

🇷🇺 88.204.81.62

🇺🇸 71.202.221.50

🇸🇪 62.93.166.184

🇺🇸 45.147.233.78

🇫🇮 31.134.10.35