isIPsafe

AS139659 LUCIDACLOUD LIMITED

Abuse reported against IP addresses announced by autonomous system 139659. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 18 IP addresses in AS139659 LUCIDACLOUD LIMITED were reported for abuse, in 42 reports altogether. 2 of them (11%) have a confidence score of 75 or more and are on the default blocklist. The most common reasons were Port Scan, Web Spam and Bad Web Bot. Most of them are in Hong Kong.

18addresses reported, 30 days
2on the default blocklist (75+)
42reports against them
5 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
πŸ‡­πŸ‡°83.229.124.98 76 11 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 5 h
πŸ‡­πŸ‡°68.64.176.219 76 7 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 11 h
πŸ‡­πŸ‡°193.134.210.148 34 5 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 23 h
πŸ‡­πŸ‡°207.57.126.68 32 2 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 14 h
πŸ‡­πŸ‡°207.57.127.177 30 1 SSH 5 h
πŸ‡­πŸ‡°45.152.65.2 30 3 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 23 h
πŸ‡­πŸ‡°83.229.125.128 26 2 Web SpamPort ScanHackingBad Web BotVulnerability Scan 14 h
πŸ‡­πŸ‡°83.229.124.127 18 1 Brute-ForceSSHMalware Distribution 14 h
πŸ‡­πŸ‡°207.57.123.131 14 1 Web SpamPort ScanBad Web Bot 23 h
πŸ‡­πŸ‡°149.104.24.86 14 1 Web SpamPort ScanBad Web Bot 23 h
πŸ‡­πŸ‡°83.229.123.88 14 1 Web SpamPort ScanBad Web Bot 23 h
πŸ‡­πŸ‡°68.64.179.186 14 1 Web SpamPort ScanBad Web Bot 23 h
πŸ‡­πŸ‡°83.229.126.78 14 1 Web SpamPort ScanBad Web Bot 23 h
πŸ‡­πŸ‡°38.55.192.14 14 1 Web SpamPort ScanBad Web Bot 23 h
πŸ‡ΈπŸ‡¬149.104.26.98 14 1 Web SpamPort ScanBad Web Bot 23 h
πŸ‡­πŸ‡°207.57.125.75 14 1 Web SpamPort ScanBad Web Bot 23 h
πŸ‡­πŸ‡°83.229.123.161 11 1 HackingVulnerability Scan 14 h
πŸ‡­πŸ‡°45.152.67.20 11 1 HackingVulnerability Scan 14 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 9 minutes ago.