JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.95.57.2

77.95.57.2 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 37%: ?

37%

ISP	MetroEthernet provider
Usage Type	Fixed Line ISP
ASN	AS42837
Domain Name	elcat.kg
Country	🇰🇬 Kyrgyzstan
City	Bishkek, Bishkek

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.95.57.2

Whois 77.95.57.2

IP Abuse Reports for 77.95.57.2:

This IP address has been reported a total of 10 times from 8 distinct sources. 77.95.57.2 was first reported on January 26th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-10-20 04:15:01 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇲🇹 Malta	2026-10-19 15:36:55 (2 days ago)	77.95.57.2 - - [19/Oct/2026:17:36:55 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 1 ... show more 77.95.57.2 - - [19/Oct/2026:17:36:55 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇮🇹 CoreTech srl	2026-10-17 13:48:58 (5 days ago)	cloudlinux2 fail2ban: 2026-10-17 15:44:15,996 fail2ban.filter [1597]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-10-17 15:44:15,996 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 154.159.252.203 - 2026-10-17 15:44:15cloudlinux2 fail2ban: 2026-10-17 15:44:49,739 fail2ban.filter [1597]: INFO [recidive] Found 154.159.252.203 - 2026-10-17 15:44:49cloudlinux2 fail2ban: 2026-10-17 15:44:49,651 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 154.159.252.203 - 2026-10-17 15:44:49cloudlinux2 fail2ban: 2026-10-17 15:44:49,734 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Ban 154.159.252.203cloudlinux2 fail2ban: 2026-10-17 15:44:57,492 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 171.61.28.54 - 2026-10-17 15:44:57cloudlinux2 fail2ban: 2026-10-17 15:45:08,391 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 77.95.57.2 - 2026-10-17 15:45:08cloudlinux2 fail2ban: 2026-10-17 15:45:14,710 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 49.47.197.28 - 2026-10-17 15:45:13cloudlinux2 fail2ban: 2026-10 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 04:17:26 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 77.95.57.2 (77-95-57-2.elcat.kg): 1 in the last ... show more (mod_security) mod_security (id:225170) triggered by 77.95.57.2 (77-95-57-2.elcat.kg): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 00:17:20.191819 2026] [security2:error] [pid 808:tid 808] [client 77.95.57.2:38004] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|schlegelcreative.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "schlegelcreative.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atL20FarTo6FGXGsGpD3DwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-16 04:55:04 (6 days ago)	Calendar filter flood (L7 DDoS) \| host: escrime-auvergnerhonealpes.fr \| path: /calendrier-2/action~a ... show more Calendar filter flood (L7 DDoS) \| host: escrime-auvergnerhonealpes.fr \| path: /calendrier-2/action~agenda/cat_ids~139,361/tag_ids~589,493,619,476,246,340,420/request_format~json/ \| src_port: 59994 \| 2026-10-16 04:55 UTC show less	DDoS Attack Web App Attack
🇩🇪 LRob	2026-09-22 03:37:35 (1 month ago)	This address requests our sites over plain http, is answered with a redirect to https, and never fol ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. \| method: GET \| path: /quelle-regle-pour-debuter-en-premier-empire-par-jplelain \| 2026-09-22 03:37 UTC show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-27 05:47:15 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 17:49:46 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-04-19 22:41:05 (6 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇪🇸 10dencehispahard SL	2026-01-26 12:29:43 (8 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.77.86.237

🇦🇹 213.225.7.250

🇻🇪 201.221.115.126

🇺🇸 184.186.73.79

🇳🇱 129.121.111.123

🇸🇬 103.250.11.156

🇫🇷 91.231.89.128

🇧🇷 34.39.176.200

🇺🇸 2a10:4a04:f0e0:f619:4ddc:8e8c:5b16:762

🇵🇱 176.241.245.162

🇸🇪 171.25.158.82

🇩🇪 130.12.180.176

🇺🇸 43.153.14.44

🇹🇷 31.210.36.240

🇨🇳 220.196.191.58

🇻🇪 201.249.192.30

🇵🇱 194.180.49.123

🇰🇿 185.22.67.86

🇪🇨 177.234.197.189

🇺🇸 162.216.150.218