JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 77.110.102.252

77.110.102.252 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 70%: ?

70%

ISP	AEZA GROUP LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210644
Domain Name	aeza.ru
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 77.110.102.252

Whois 77.110.102.252

IP Abuse Reports for 77.110.102.252:

This IP address has been reported a total of 31 times from 20 distinct sources. 77.110.102.252 was first reported on July 15th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-17 16:13:35 (5 days ago)	fail2ban-dovecot	Email Spam Brute-Force
🇺🇸 mnsf	2026-08-17 08:05:05 (5 days ago)	Scanning/Probing (16)	Brute-Force Web App Attack
🇩🇪 anycast_ac	2026-08-17 05:36:19 (5 days ago)	[DDoS Attacker] This IP was attacking website bgbot.bravohvh.fun and sent 336 requests on port 443	DDoS Attack Web App Attack
🇷🇴 gtheo99	2026-08-15 16:36:26 (1 week ago)	77.110.102.252 (NL/The Netherlands/-), 15 distributed imapd attacks on account [[email protected] ... show more 77.110.102.252 (NL/The Netherlands/-), 15 distributed imapd attacks on account [[email protected]] in the last 900 secs show less	SSH Brute-Force Hacking
🇺🇸 soreviv	2026-08-13 23:18:05 (1 week ago)	2026-08-13T17:18:04.506831-06:00 mail dovecot: imap-login: Disconnected: Connection closed (auth fai ... show more 2026-08-13T17:18:04.506831-06:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<drviveros>, method=PLAIN, rip=77.110.102.252, lip=185.164.111.83, TLS: Connection closed, session=<FME+6vVYGL1Nbmb8> ... show less	Email Spam Brute-Force
🇫🇮 NoaQT	2026-08-13 09:19:10 (1 week ago)	2026-08-13T09:19:07.162102+00:00 ingress-1 haproxy[15631]: 77.110.102.252:58666 [13/Aug/2026:09:19:0 ... show more 2026-08-13T09:19:07.162102+00:00 ingress-1 haproxy[15631]: 77.110.102.252:58666 [13/Aug/2026:09:19:04.390] https_in~ https_in/<NOSRV> 1260/-1/-1/-1/1260 429 225 - - PR-- 3239/3226/0/0/0 0/0 "GET https://vault.mentis.si/ HTTP/2.0" 2026-08-13T09:19:07.162124+00:00 ingress-1 haproxy[15631]: 77.110.102.252:58666 [13/Aug/2026:09:19:04.390] https_in~ https_in/<NOSRV> 1260/-1/-1/-1/1260 429 225 - - PR-- 3239/3226/0/0/0 0/0 "GET https://vault.mentis.si/ HTTP/2.0" 2026-08-13T09:19:07.162140+00:00 ingress-1 haproxy[15631]: 77.110.102.252:58666 [13/Aug/2026:09:19:04.390] https_in~ https_in/<NOSRV> 1260/-1/-1/-1/1260 429 225 - - PR-- 3239/3226/0/0/0 0/0 "GET https://vault.mentis.si/ HTTP/2.0" 2026-08-13T09:19:07.162156+00:00 ingress-1 haproxy[15631]: 77.110.102.252:58666 [13/Aug/2026:09:19:04.390] https_in~ https_in/<NOSRV> 1260/-1/-1/-1/1260 429 225 - - PR-- 3239/3226/0/0/0 0/0 "GET https://vault.mentis.si/ HTTP/2.0" 2026-08-13T09:19:07.162179+00:00 ingress-1 haproxy[15631]: 77.110.102.252:58666 ... show less	DDoS Attack
🇺🇸 nowyouknow	2026-08-13 00:45:48 (1 week ago)	(From [email protected]) Hi there, I'm Sophia with Top Talent VAs. I’m reaching out beca ... show more (From [email protected]) Hi there, I'm Sophia with Top Talent VAs. I’m reaching out because we offer Virtual Assistants powered by our custom-built AI tools. We literally can take over your entire marketing, administrative tasks, graphic design, video animations, accounting, and even all your prospecting with our system. Are you looking for any help? Reply YES to schedule a Zoom meeting or STOP to unsubscribe. show less	Phishing Web Spam
🇸🇪 KIDOS	2026-08-12 20:39:36 (1 week ago)	malicious activity	Web App Attack
Anonymous	2026-08-12 04:40:12 (1 week ago)	\| [Dangerous/Lebanon] Aggressive IP 77.110.102.252 (~30 hits). Type: DoS Defender- Web server 400 er ... show more \| [Dangerous/Lebanon] Aggressive IP 77.110.102.252 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇮🇩 sockominfo	2026-08-12 01:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 77.110.102.252. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 77.110.102.252. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 filstal.org	2026-08-05 03:47:35 (2 weeks ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇬🇧 Hobby Bob	2026-08-04 04:19:12 (2 weeks ago)	Aug 4 05:19:12 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in ... show more Aug 4 05:19:12 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=77.110.102.252, lip=X.X.X.X session= show less	Port Scan Hacking
🇮🇩 sockominfo	2026-08-04 04:00:53 (2 weeks ago)	Zimbra: Login failures from malicious IP: 77.110.102.252. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 77.110.102.252. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 73%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-04 03:00:09 (2 weeks ago)	Zimbra: Login failures from malicious IP: 77.110.102.252. Threat Score: 5.9/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 77.110.102.252. Threat Score: 5.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-08-03 18:09:19 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 184.33.230.110

🇭🇰 165.154.6.224

🇷🇴 2.57.122.209

🇷🇴 193.46.255.86

🇳🇱 185.93.89.39

🇺🇸 162.216.149.24

🇦🇷 148.222.130.63

🇨🇳 118.196.51.94

🇨🇳 117.132.188.205

🇭🇰 103.146.79.89

🇷🇺 89.109.231.121

🇫🇷 85.217.140.46

🇱🇹 77.90.185.20

🇺🇸 76.38.79.207

🇺🇸 66.132.186.211

🇺🇸 64.62.197.75

🇩🇪 2620:171:f8:f0:9999::217

🇩🇪 194.187.176.121

🇵🇱 194.180.49.220

🇮🇩 180.243.0.246