isIPsafe

AS198953 Proton66 OOO

Abuse reported against IP addresses announced by autonomous system 198953. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 88 IP addresses in AS198953 Proton66 OOO were reported for abuse, in 177 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Web App Attack, Command & Control and Web Spam. Most of them are in Russia.

88addresses reported, 30 days
0on the default blocklist (75+)
177reports against them
8 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇷🇺176.120.22.97 62 9 Web SpamPort ScanHackingBad Web BotExploited HostWeb App AttackCredential StuffingVulnerability ScanMalware DistributionCommand & ControlDatabase AttackHTTP Flood 8 h
🇷🇺176.120.22.61 62 9 Web SpamPort ScanHackingBad Web BotExploited HostWeb App AttackCredential StuffingVulnerability ScanMalware DistributionCommand & ControlDatabase AttackHTTP Flood 8 h
🇷🇺176.120.22.240 46 4 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & Control 9 h
🇷🇺37.77.150.241 37 4 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & Control 9 h
🇷🇺37.77.150.100 37 4 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & Control 9 h
🇷🇺37.77.150.71 37 4 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & Control 9 h
🇷🇺37.77.150.67 37 4 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & Control 9 h
🇷🇺193.143.1.66 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.242 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.192 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.147 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.110 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.92 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.73 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.53 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.47 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.46 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.42 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.36 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇷🇺176.120.22.17 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 46 minutes ago.