JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.48.159.11

77.48.159.11

Recent Activity

30 reports found in our database

85% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Lenka Malinova

Usage Type

Fixed Line ISP

ASN

AS16019

Hostname(s)

ip-77-48-159-11.net.vodafone.cz

Domain Name

vodafone.cz

Country

🇨🇿 Czechia

City

Kadan, Usti nad Labem Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 77.48.159.11:

This IP address has been reported a total of 30 times from 23 distinct sources. 77.48.159.11 was first reported on June 28th 2026, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: Germany with 7 reports; France with 5 reports; United States of America with 4 reports. The most common categories in these recent reports were: Hacking 10 times; Port Scan 10 times; Web App Attack 10 times; Brute-Force 8 times; SSH 7 times; Other 15 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-09-10 07:54:07 (2 days ago)	SSH break in attempt ...	SSH
🇩🇪 LRob	2026-09-09 19:39:38 (2 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /wp-login.php \| 2026-09-09 19:39 UTC show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-09 04:20:27 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 77.48.159.11 (ip-77-48-159-11.net.vodafone.cz): ... show more (mod_security) mod_security (id:225170) triggered by 77.48.159.11 (ip-77-48-159-11.net.vodafone.cz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 00:20:19.477618 2026] [security2:error] [pid 7741:tid 7741] [client 77.48.159.11:48030] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ww1.clcmillvale.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ww1.clcmillvale.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqDeg7TfNROPCR2Kw-El2AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-09 03:21:34 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 77.48.159.11 (ip-77-48-159-11.net.vodafone.cz): ... show more (mod_security) mod_security (id:225170) triggered by 77.48.159.11 (ip-77-48-159-11.net.vodafone.cz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 23:21:26.984352 2026] [security2:error] [pid 19222:tid 19222] [client 77.48.159.11:45966] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|coolcustomproducts.benshermanguitar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coolcustomproducts.benshermanguitar.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqDQtmiqU02ea5S5Uc4HMwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-09 02:23:40 (3 days ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 77.48.159.11 (CZ/Czechia/ip-77-48-159-11.net. ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 77.48.159.11 (CZ/Czechia/ip-77-48-159-11.net.vodafone.cz): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 FeG Deutschland	2026-09-08 18:13:36 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 12:53:25 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 77.48.159.11 (ip-77-48-159-11.net.vodafone.cz): ... show more (mod_security) mod_security (id:225170) triggered by 77.48.159.11 (ip-77-48-159-11.net.vodafone.cz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:53:19.181989 2026] [security2:error] [pid 23219:tid 23219] [client 77.48.159.11:56376] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hodlmoser.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hodlmoser.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aqAFP-Jo44TSesmOVkCNnAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-08 02:55:35 (4 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 ITSNF	2026-09-05 06:00:10 (1 week ago)	Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=22,23	Port Scan Hacking
🇵🇱 mkey	2026-09-04 12:45:03 (1 week ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS= ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS=22,23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-09-04 14:39:21 \| LAST=2026-09-04 14:39:21. Last seen 2026-09-04 14:39:21. show less	Port Scan
Anonymous	2026-09-04 03:45:14 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
Anonymous	2026-09-03 15:04:11 (1 week ago)	Blocked by UFW [23/tcp] \| SPT: 44962 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefin ... show more Blocked by UFW [23/tcp] \| SPT: 44962 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇹🇷 ugurcoskun	2026-09-02 04:04:16 (1 week ago)	Seczar SecureOps — SSH Brute Force (6 events) — quarantined 43200m on FortigateMaster	SSH Brute-Force
🇨🇭 ALPHANET	2026-08-31 14:13:34 (1 week ago)	SSH honeypot 2 login attempt	Hacking Brute-Force Exploited Host SSH
🇧🇷 noconex	2026-08-27 08:08:04 (2 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 77.48.159. ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 77.48.159.11 show less	Port Scan Brute-Force SSH

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.167

🇰🇬 212.112.98.73

🇲🇾 203.121.40.210

🇺🇦 194.187.155.22

🇲🇽 187.232.78.50

🇲🇽 187.141.57.197

🇺🇸 104.22.101.70

🇸🇰 92.180.232.0

🇳🇱 89.42.231.200

🇱🇹 62.60.130.253

🇮🇳 202.62.64.52

🇲🇽 187.184.5.28

🇲🇽 187.159.11.157

🇵🇭 175.158.201.70

🇹🇭 165.154.120.29

🇻🇳 123.25.30.110

🇹🇷 94.154.43.223

🇺🇸 68.227.32.120

🇫🇷 51.255.204.41

🇫🇷 51.210.100.146