JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.91.86.95

77.91.86.95 was found in our database!

This IP was reported 1,065 times. Confidence of Abuse is 0%: ?

ISP	u1host ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213877
Hostname(s)	vm1046223.hosted-by.u1host.com
Domain Name	u1host.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.91.86.95

Whois 77.91.86.95

IP Abuse Reports for 77.91.86.95:

This IP address has been reported a total of 1,065 times from 204 distinct sources. 77.91.86.95 was first reported on April 10th 2023, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-11-03 06:28:40 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 03 01:28:36.899208 2024] [security2:error] [pid 18428:tid 18428] [client 77.91.86.95:39090] [client 77.91.86.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dpproductionhk.com"] [uri "/.git/config"] [unique_id "ZycYFGn8XssjmznA5D1dfQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 oncord	2024-11-03 02:40:09 (1 year ago)	Form spam	Web Spam
🇩🇪 Packets-Decreaser.NET	2024-11-01 17:23:51 (1 year ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇫🇷 Sklurk	2024-10-28 11:48:04 (1 year ago)	Web App Attack	Web App Attack
Anonymous	2024-10-25 06:26:52 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇸🇬 oncord	2024-10-22 10:44:36 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2024-10-21 18:31:07 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 21 14:31:03.855090 2024] [security2:error] [pid 31264:tid 31264] [client 77.91.86.95:43644] [client 77.91.86.95] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|medusakenya.com\|F\|2"] [data ".old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "medusakenya.com"] [uri "/config.old"] [unique_id "Zxad56dM2qpdmTTZbdPFogAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-16 19:31:05 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 16 15:30:59.895753 2024] [security2:error] [pid 28642:tid 28642] [client 77.91.86.95:49292] [client 77.91.86.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thesalonx.com"] [uri "/wp-config.phpOLD"] [unique_id "ZxAUc6Jo8M74rCHyoo6I3gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-10-15 12:01:01 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-10-13 04:31:43 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 13 00:31:39.725358 2024] [security2:error] [pid 19461:tid 19461] [client 77.91.86.95:42308] [client 77.91.86.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caribbeancoralinstitute.org"] [uri "/wp-config.php~"] [unique_id "ZwtNK8Xh_LOSQ2qW_VA6YQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-12 21:43:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 77.91.86.95 (tor.node8.shadowbrokers.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 12 17:43:08.437217 2024] [security2:error] [pid 10306:tid 10306] [client 77.91.86.95:53510] [client 77.91.86.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "altruaglobalsolutions.com"] [uri "/wp-config.phpn"] [unique_id "ZwrtbArRpKJ0AwbJhfadYwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-11 19:06:00 (1 year ago)	Excessive crawling/scraping. Vulnerable file probing.	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-11 14:55:00 (1 year ago)	"Access from malicious IP address,Illegal host name"	Brute-Force
🇩🇪 getroot.eu	2024-10-09 04:07:48 (1 year ago)	77.91.86.95 - - [09/Oct/2024:06:07:47 +0200] "GET /.DS_Store HTTP/1.1" 200 88 "-" "Go-http-client/1. ... show more 77.91.86.95 - - [09/Oct/2024:06:07:47 +0200] "GET /.DS_Store HTTP/1.1" 200 88 "-" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
🇫🇮 nyuuzyou	2024-10-08 10:04:55 (1 year ago)	Intensive scraping: /web?s=%22Please%20enter%20the%20email%20address%20associated%20with%20your%20Us ... show more Intensive scraping: /web?s=%22Please%20enter%20the%20email%20address%20associated%20with%20your%20User%20account.%20Your%20username%20will%20be%20emailed%20to%20the%20email%20address%20on%20file.%22%20%22work%20at%20home%20genuine%22&country=ky-ky&scraper=brave. User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51. show less	Bad Web Bot

Showing 1 to 15 of 1065 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.16.238.49

🇵🇦 191.98.196.99

🇵🇾 190.128.201.18

🇷🇺 178.178.222.59

🇺🇸 172.237.137.89

🇪🇸 172.68.134.27

🇺🇸 162.241.181.223

🇳🇱 158.173.3.68

🇬🇧 154.16.44.35

🇻🇳 123.20.236.206

🇺🇸 65.49.1.66

🇮🇶 62.201.248.29

🇹🇭 49.230.84.68

🇻🇳 27.79.42.143

🇺🇸 2400:cb00:119:1000:eed9:e3d7:76c4:de97

🇨🇳 220.154.131.111

🇳🇱 213.176.24.72

🇺🇸 209.38.131.131

🇳🇱 195.178.110.30

🇫🇷 185.197.251.67