JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.239.96.194

77.239.96.194 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 33%: ?

33%

ISP	nuxt.cloud
Usage Type	Data Center/Web Hosting/Transit
ASN	AS216127
Hostname(s)	vm926642.cloud.nuxt.network
Domain Name	nuxt.cloud
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.239.96.194

Whois 77.239.96.194

IP Abuse Reports for 77.239.96.194:

This IP address has been reported a total of 15 times from 10 distinct sources. 77.239.96.194 was first reported on April 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Tsumugi Kotobuki	2026-07-29 22:12:17 (1 day ago)	50x HTTPS Fake-Site Flood \| Paths: /(31x) \| Codes: 444(50x) \| Host: kotobuki.world:443(50x) \| UA: - ... show more 50x HTTPS Fake-Site Flood \| Paths: /(31x) \| Codes: 444(50x) \| Host: kotobuki.world:443(50x) \| UA: - \| rDNS: vm926642.cloud.nuxt.network \| F2B/angie-ddos@2026-07-29T22:12:16Z show less	DDoS Attack Hacking
🇮🇩 sockominfo	2026-07-21 16:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 77.239.96.194. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 77.239.96.194. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇪🇸 el-brujo	2026-07-17 10:32:55 (1 week ago)	07/17/2026-12:32:07.832336 77.239.96.194 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
🇫🇷 MatStef132	2026-07-13 13:06:54 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-23 23:21:50 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 77.239.96.194 (vm926642.cloud.nuxt.network): 1 ... show more (mod_security) mod_security (id:225170) triggered by 77.239.96.194 (vm926642.cloud.nuxt.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 19:21:45.242220 2026] [security2:error] [pid 18123:tid 18123] [client 77.239.96.194:60745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ladymcollection.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ladymcollection.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajsVCdySxd_2P7uXC_4ZVgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-06-17 02:44:03 (1 month ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇫🇷 MatStef132	2026-06-12 22:47:17 (1 month ago)	MatShield L7: blocked on mathost.eu (path-flood-burst)	DDoS Attack
🇨🇦 leithzz	2026-06-08 08:42:07 (1 month ago)	Report by Cloudflare.Time: 2026-06-08T08:41:40Z	DDoS Attack
🇫🇷 MatStef132	2026-05-24 01:07:55 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-05-21 15:51:12 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇵🇱 MatStef132	2026-05-20 20:46:43 (2 months ago)	MatShield L7: blocked on justchat.icu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-05-17 18:03:41 (2 months ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-12 23:08:06 (2 months ago)	ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/77.239.96.194 2026-05-12 10:20: ... show more ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/77.239.96.194 2026-05-12 10:20:01 / 2026-05-12 10:19:57 / 2026-05-12 10:19:25 / 2026-05-12 10:19:58 / 2026-05-12 10:19:59 / 2026-05-12 10:19:53 / 2026-05-12 10:19:49 / show less	Web App Attack
🇮🇹 VHosting	2026-04-26 13:08:13 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇨🇭 backslash	2026-04-20 19:09:00 (3 months ago)	ddos	DDoS Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.241

🇪🇬 196.202.80.94

🇰🇷 180.71.9.31

🇺🇸 178.16.55.216

🇺🇸 172.110.223.159

🇺🇸 162.216.150.88

🇩🇪 157.230.18.133

🇭🇰 154.12.85.40

🇷🇺 89.151.178.244

🇺🇸 64.62.156.214

🇹🇭 49.49.237.5

🇯🇵 47.245.38.88

🇨🇳 36.189.207.209

🇺🇸 2600:1f18:3120:f500:d66:bf44:e909:da5e

🇲🇾 202.165.26.42

🇹🇭 202.29.220.106

🇪🇸 196.196.150.100

🇹🇹 181.118.46.229

🇫🇷 79.137.76.231

🇩🇪 69.5.169.197