Is IP address 77.83.240.70 dangerous?

Yes, 77.83.240.70 is considered dangerous with a threat level of 8/10. It has been reported 35,170 times for malicious activities including . We recommend blocking this IP address.

Who owns or operates IP address 77.83.240.70?

IP address 77.83.240.70 is operated by Alsycon B.V. (ASN 49870) and is geolocated to US. This information is derived from public WHOIS and geolocation databases.

Should I block IP address 77.83.240.70?

Yes, blocking 77.83.240.70 is strongly recommended. With a threat level of 8/10 and 35,170 security reports, this IP poses significant risk. Implement firewall rules to block incoming and outgoing traffic.

How accurate is this threat assessment for 77.83.240.70?

Our threat assessment for 77.83.240.70 has a confidence score of 69%, based on 35,170 independent reports from multiple independent sources. Higher confidence scores indicate more reliable assessments.

IP Address

77.83.240.70

IPv4 Public

AS49870

Alsycon B.V.

35,170 Reports

US Location

Alsycon B.V. ASN 49870

35,170 Reports

Honeypot Data Source

Elevated Risk

IP address 77.83.240.70 presents a severe and highly active threat with a threat level of 8/10 and an activity frequency rated 8/10. In total, 34,365 reports have been collected from 20 automated honeypot sources, indicating sustained, automated attack behavior. The dominant threat categories are evenly distributed across hacking, exploited host activity, IoT targeting, and web application attacks, with 17 reports each. Supporting activity includes email spam, VoIP fraud, SSH brute-force attempts, and port scanning. The IP has been reported from August 2025 through May 2026, reflecting persistent engagement over an extended period. The confidence score of 69% suggests strong but not absolute certainty that all observed behavior originates from a single compromised platform.

This level of multi-vector activity is significant because it indicates the IP is likely part of a botnet or a heavily compromised server being used as a multi-purpose attack platform. The combination of IoT targeting, web application probing, and credential attacks means the operator behind this IP is simultaneously attempting to compromise edge devices, exploit web services, and conduct fraud. For organizations running web applications, IoT devices, or VoIP infrastructure, this IP represents a cross-vector risk that could lead to data breaches, service disruption, or financial fraud if not blocked proactively.

Site operators should implement blocklisting of this IP at the network perimeter firewall or intrusion prevention system to immediately cease all incoming malicious traffic. Given the IoT and ICS targeting patterns observed, organizations should audit IoT device segmentation and ensure that default credentials, UPnP, and unnecessary services are disabled on networked devices. Finally, monitor for Redis exposure and SSH brute-force patterns in internal logs, as these are common entry vectors linked to the attack patterns associated with this IP, and apply rate limiting on authentication endpoints to reduce the effectiveness of credential-stuffing attempts.

More threatening than 82% of monitored IPs

Threat Categories

IoT Targeted 26

Hacking 21

Exploited Host 21

Web App Attack 20

SSH 19

Email Spam 18

Technical Details

IoT-targeted attacks exploit weak security in smart devices, cameras, routers, and other connected devices.

Recommended Mitigations

Segment IoT networks, update device firmware, change default credentials, and disable UPnP.

Behavioral Analysis

Activity Pattern: Recent Spike

Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.

First Observed 9. July 2026

Last Activity 5. August 2026

Recent (7 days) 4 incidents

Reputable Network

This IP is hosted on a network (ASN 49870) with generally good reputation. The ISP Alsycon B.V. maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Immediate monitoring recommended.

Reputation Summary

Threat Level 8/10 High

Critical

Activity Frequency 8/10 High

Confidence Score 69% High Confidence

Confidence History

30. Jul 2026 - 5. Aug 2026

69% Current

Stable Trend

Date	Categories	Source	Confidence
5. Aug 2026 New	Hacking Web App Attack Exploited Host	Honeypot x3	75%
5. Aug 2026	Fraud VoIP	Honeypot	75%
31. Jul 2026	Exploited Host Hacking	Honeypot x2	75%
31. Jul 2026	Fraud VoIP	Honeypot	75%
30. Jul 2026	IoT Targeted	Honeypot	75%
30. Jul 2026	Hacking Exploited Host SSH +3	Honeypot x6	75%
30. Jul 2026	Hacking Exploited Host SSH +3	Honeypot x6	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +3	Honeypot x6	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +3	Honeypot x6	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +3	Honeypot x6	75%
30. Jul 2026	IoT Targeted	Honeypot	75%
30. Jul 2026	Hacking Exploited Host IoT Targeted +3	Honeypot x6	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +3	Honeypot x6	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +3	Honeypot x6	75%
30. Jul 2026	Hacking Exploited Host Email Spam +3	Honeypot x6	75%
30. Jul 2026	Hacking Exploited Host IoT Targeted +3	Honeypot x6	75%
30. Jul 2026	IoT Targeted	Honeypot	75%
30. Jul 2026	Hacking Exploited Host Email Spam +3	Honeypot x6	75%
30. Jul 2026	IoT Targeted	Honeypot	75%
30. Jul 2026	Hacking Exploited Host Web App Attack +3	Honeypot x6	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +3	Honeypot x6	75%
30. Jul 2026	Hacking Exploited Host SSH +3	Honeypot x6	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +2	Honeypot x5	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +3	Honeypot x6	75%
30. Jul 2026	IoT Targeted	Honeypot	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +3	Honeypot x6	75%
30. Jul 2026	Hacking Email Spam Exploited Host +3	Honeypot x6	75%
30. Jul 2026	IoT Targeted	Honeypot	75%
30. Jul 2026	Hacking Web App Attack Exploited Host +3	Honeypot x6	75%
30. Jul 2026	IoT Targeted	Honeypot	75%

Basic Information

IP Address: 77.83.240.70
IP Version: IPv4
Network Type: Public
Tor Network: No
Network Class: Class A

Geolocation

Country: US
ASN: AS49870
ISP: Alsycon B.V.

DNS Information

Reverse DNS: .
PTR Record: Yes
Connection Type: Static

Statistics

Total Reports: 35,170
First Reported: 24 Aug 2025
Last Reported: 5 Aug 2026, 14:40

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

ASN: AS49870

Organization: Alsycon B.V.

Country:

Network Threat Assessment

2/10

This network appears to be relatively clean with very low threat indicators.

Network Statistics

102

Total IPs Monitored

81,824

Total Reports

802.2

Reports per IP

Network Context

This IP address belongs to Alsycon B.V. (AS49870), which manages 102 IP addresses in our monitoring system. Out of these, 81,824 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.

Network status: This network appears to be well-maintained with low threat indicators.

Comparative Analysis

How this IP compares to others in our threat intelligence database

82 %

Global Threat Ranking

This IP is more threatening than 82% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 312,122 reported IPs worldwide

Threat Level 8/10 avg: 6.0 +

Total Reports 35,170 avg: 18 ++

Network Comparison

Compared against 157 IPs in ASN 49870

Threat Level 8/10 network avg: 6.4 +

Total Reports 35,170 network avg: 588 ++

Network Alsycon B.V. has overall threat level 2/10

Geographic Comparison

Compared against 65,787 IPs in US

Threat Level 8/10 country avg: 6.5 +

Total Reports 35,170 country avg: 31 ++

Daily report activity over the last 30 days showing patterns and peaks.

Peak Day 22 Jul 2026 67 reports

Daily Average 19.9 reports/day

Most Active Monday 8,434 reports

Evolution of threat level over time based on reported categories and frequency.

Initial Threat 6/10

Current Threat 5/10

Distribution of threat categories reported over time.

Top Threat Categories

Hacking 21,397

Email Spam 5,641

Exploited Host 5,168

Web App Attack 3,681

IoT Targeted 2,766

Activity patterns showing when this IP is most active during the day and week.

Hourly Activity

Peak activity at 22:00 with 2324 reports

Weekly Activity

Geographic Threat Distribution

292,711 threat incidents tracked globally • Last 24h: 17,660 Logs

FEED

Top Threat Sources

01

United States US THIS IP

65,787 22.5%
02

India IN

49,120 16.8%
03

China CN

35,633 12.2%
04

Brazil BR

15,556 5.3%
05

Germany DE

10,500 3.6%
06

Pakistan PK

8,479 2.9%
07

Indonesia ID

8,404 2.9%
08

Singapore SG

8,312 2.8%
09

Russia RU

6,394 2.2%
10

Netherlands NL

6,295 2.2%

+40 more countries

THREAT LEVEL

LOW MED HIGH

IPs from the same Autonomous System (AS) network provider.

20 Related IPs

9.4/10 Avg Threat

95% Avg Confidence

20 High Threat

High-risk network: Majority of related IPs are flagged