AS200391 KREZ 999 EOOD

Abuse reported against IP addresses announced by autonomous system 200391. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 9 IP addresses in AS200391 KREZ 999 EOOD were reported for abuse, in 45 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Brute-Force, SSH and Malware Distribution. Most of them are in United States.

9addresses reported, 30 days

0on the default blocklist (75+)

45reports against them

2 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇺🇸5.188.206.30	74	13	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	2 h
🇺🇸5.188.206.34	74	14	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	2 h
🇺🇸5.188.206.66	54	7	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	8 h
🇺🇸5.188.206.202	28	4	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	2 d
🇺🇸5.188.206.194	26	2	Hacking Web App Attack Vulnerability Scan Command & Control	23 h
🇺🇸5.188.206.54	17	1	Brute-Force SSH Malware Distribution	23 h
🇺🇸5.188.206.46	17	1	Brute-Force SSH Malware Distribution	23 h
🇺🇸5.188.206.10	17	1	Brute-Force SSH Malware Distribution	23 h
🇺🇸5.188.206.94	15	2	Web Spam Port Scan Bad Web Bot	8 h

What they were reported for

Where they are

🇺🇸 United States9

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 19 minutes ago.