JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.83.200.168

77.83.200.168 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 100%: ?

100%

ISP	Meric Internet Teknolojileri A.S.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209737
Hostname(s)	host-77.83.200.168.meric.net.tr
Domain Name	meric.net.tr
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.83.200.168

Whois 77.83.200.168

IP Abuse Reports for 77.83.200.168:

This IP address has been reported a total of 58 times from 46 distinct sources. 77.83.200.168 was first reported on March 3rd 2025, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 poseidon00	2026-07-24 08:26:46 (1 minute ago)	77.83.200.168 - - [24/Jul/2026:08:26:42 +0000] "POST /wp-login.php HTTP/1.1" 200 4991 "https://eocon ... show more 77.83.200.168 - - [24/Jul/2026:08:26:42 +0000] "POST /wp-login.php HTTP/1.1" 200 4991 "https://eoconsultores.es/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 77.83.200.168 - - [24/Jul/2026:08:26:43 +0000] "POST /wp-login.php HTTP/1.1" 200 4991 "https://eoconsultores.es/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" 77.83.200.168 - - [24/Jul/2026:08:26:44 +0000] "POST /wp-login.php HTTP/1.1" 200 4991 "https://eoconsultores.es/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 77.83.200.168 - - [24/Jul/2026:08:26:45 +0000] "POST /wp-login.php HTTP/1.1" 200 4991 "https://eoconsultores.es/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 77.83.200.168 - - [24/Jul/2026:08:26:46 +0000] "POST /wp-login.php HTTP/ ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 08:26:03 (2 minutes ago)	(mod_security) mod_security (id:210730) triggered by 77.83.200.168 (host-77.83.200.168.meric.net.tr) ... show more (mod_security) mod_security (id:210730) triggered by 77.83.200.168 (host-77.83.200.168.meric.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:25:54.577833 2026] [security2:error] [pid 1476393:tid 1476393] [client 77.83.200.168:64171] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|gamepart.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "amMhkggho3YqsRCXzrUrWgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 FireGuard Server	2026-07-24 08:25:08 (3 minutes ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=443	Port Scan Hacking
🇪🇸 ofm-abuse	2026-07-24 08:24:27 (3 minutes ago)	Brute-force ...	Brute-Force Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-24 08:08:11 (19 minutes ago)	(mod_security) mod_security (id:225170) triggered by 77.83.200.168 (host-77.83.200.168.meric.net.tr) ... show more (mod_security) mod_security (id:225170) triggered by 77.83.200.168 (host-77.83.200.168.meric.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:08:05.337199 2026] [security2:error] [pid 31927:tid 31996] [client 77.83.200.168:51864] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|greencitymethods.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greencitymethods.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amMdZdzSWTW9NHkFs4YqVgAAAgs"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 paulshipley.com.au	2026-07-24 08:04:04 (24 minutes ago)	dance4fitness.com.au:443 77.83.200.168 - - [24/Jul/2026:18:04:00 +1000] "GET /?author=1 HTTP/1.1" 40 ... show more dance4fitness.com.au:443 77.83.200.168 - - [24/Jul/2026:18:04:00 +1000] "GET /?author=1 HTTP/1.1" 404 170263 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 infra-monitor	2026-07-24 08:00:05 (28 minutes ago)	Automated ban via infra-monitor: wp-sensitive-paths, wordpress-probe	Web App Attack
🇵🇹 Subnet Phantom Veil	2026-07-24 07:58:32 (29 minutes ago)	[Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatic ... show more [Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatically blocked, and the IP Address banned. [Method]: => GET. [Request]: => /public/wp-admin. Access revoked. [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36. [OS]: Unknown. [IP Address]: 77.83.200.168. [IoA Datetime]: 2026-07-24 05:16:25 UTC. show less	Bad Web Bot Hacking Port Scan Web App Attack
🇵🇹 Subnet Shadow Specter	2026-07-24 07:53:08 (35 minutes ago)	[Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatic ... show more [Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatically blocked, and the IP Address banned. [Method]: => GET. [Request]: => /public/wp-admin. Access revoked. [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36. [OS]: Unknown. [IP Address]: 77.83.200.168. [IoA Datetime]: 2026-07-24 05:16:11 UTC +1. show less	Bad Web Bot Hacking Port Scan Web App Attack
🇺🇸 WeekendWeb	2026-07-24 07:48:36 (39 minutes ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 07:29:23 (58 minutes ago)	(mod_security) mod_security (id:225170) triggered by 77.83.200.168 (host-77.83.200.168.meric.net.tr) ... show more (mod_security) mod_security (id:225170) triggered by 77.83.200.168 (host-77.83.200.168.meric.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:29:15.757268 2026] [security2:error] [pid 4158065:tid 4158065] [client 77.83.200.168:49542] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hotelkona.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotelkona.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amMUS-O5E7g2CQVIl6yvVwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 inlink.ltd	2026-07-24 07:25:01 (1 hour ago)	Known malicious PHP file or CMS probe	Web App Attack
🇭🇺 IloGus	2026-07-24 07:18:03 (1 hour ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-admin/ via rule: /wp ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-admin/ via rule: /wp-admin show less	Web App Attack Brute-Force Port Scan
🇬🇧 thetomtaylor.co.uk	2026-07-24 07:07:02 (1 hour ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 06:52:19 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 77.83.200.168 (host-77.83.200.168.meric.net.tr) ... show more (mod_security) mod_security (id:225170) triggered by 77.83.200.168 (host-77.83.200.168.meric.net.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:52:12.262638 2026] [security2:error] [pid 268946:tid 268953] [client 77.83.200.168:55813] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lavotel.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lavotel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amMLnM_DbQ4MzBLkZ_Bq7AAAAIM"], referer: https://www.google.com/search?q=wordpress show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2001:41d0:33a:a00::404

🇺🇸 2001:470:1:332::5

🇸🇬 152.42.228.75

🇺🇸 152.32.207.197

🇨🇳 118.145.239.129

🇳🇱 45.153.34.217

🇨🇳 42.224.198.32

🇳🇱 193.176.31.226

🇳🇱 192.253.248.59

🇺🇸 185.150.190.130

🇮🇳 103.106.20.201

🇫🇷 85.204.70.106

🇺🇸 74.82.47.4

🇺🇸 65.49.1.126

🇳🇱 45.148.10.141

🇩🇪 45.86.202.103

🇺🇸 20.84.101.167

🇦🇷 190.247.116.191

🇺🇸 166.62.122.24

🇮🇩 157.15.40.16