AS215730 H2NEXUS CLOUD SERVICES - FZCO

Abuse reported against IP addresses announced by autonomous system 215730. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 40 IP addresses in AS215730 H2NEXUS CLOUD SERVICES - FZCO were reported for abuse, in 58 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Malware Distribution, SSH and Brute-Force. Most of them are in Germany.

40addresses reported, 30 days

0on the default blocklist (75+)

58reports against them

1 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇩🇪64.188.91.78	36	5	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	15 h
🇩🇪94.159.104.177	30	3	Web Spam Port Scan Brute-Force Bad Web Bot SSH Malware Distribution	1 h
🇫🇮85.192.48.79	26	2	Hacking Web App Attack Vulnerability Scan Command & Control	15 h
🇩🇪87.120.93.159	24	3	Web Spam Port Scan Hacking Bad Web Bot Vulnerability Scan	1 h
🇩🇪144.31.11.136	18	2	DNS Poisoning Phishing Email Spam SQL Injection Spoofing Bad Web Bot Exploited Host SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d
🇩🇪94.159.99.164	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪94.159.97.227	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪94.159.106.117	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪94.159.104.86	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪94.159.104.73	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪94.159.101.116	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪87.120.126.96	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪87.120.126.86	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪87.120.126.80	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪87.120.126.53	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪87.120.126.51	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪87.120.126.31	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪87.120.126.169	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪87.120.126.158	17	1	Brute-Force SSH Malware Distribution	15 h
🇩🇪87.120.126.155	17	1	Brute-Force SSH Malware Distribution	15 h

What they were reported for

Where they are

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 53 minutes ago.