AS26496 GoDaddy.com, LLC

Abuse reported against IP addresses announced by autonomous system 26496. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 47 IP addresses in AS26496 GoDaddy.com, LLC were reported for abuse, in 156 reports altogether. 1 of them (2%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were Web Spam, Bad Web Bot and Port Scan. Most of them are in Singapore.

47addresses reported, 30 days

1on the default blocklist (75+)

156reports against them

46 minsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇸🇬118.139.164.171	81	14	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	46 min
🇯🇵97.74.87.152	71	10	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	9 h
🇸🇬148.66.155.73	62	11	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	3 h
🇺🇸148.72.211.221	62	9	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	3 h
🇸🇬208.109.10.204	49	9	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	46 min
🇯🇵184.168.123.171	48	7	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	9 h
🇸🇬148.66.129.125	46	4	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	9 h
🇸🇬68.178.166.175	37	3	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	33 h
🇯🇵97.74.81.164	36	5	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	18 h
🇸🇬148.66.157.176	35	5	FTP Brute-Force Web Spam Port Scan Brute-Force Bad Web Bot Credential Stuffing	18 h
🇯🇵97.74.87.44	30	4	Web Spam Port Scan Brute-Force Bad Web Bot SSH Malware Distribution	3 h
🇯🇵97.74.87.26	30	4	Web Spam Port Scan Brute-Force Bad Web Bot SSH Malware Distribution	3 h
🇸🇬184.168.125.143	30	4	Web Spam Port Scan Brute-Force Bad Web Bot SSH Malware Distribution	3 h
🇸🇬148.66.132.204	30	4	Web Spam Port Scan Brute-Force Bad Web Bot SSH Malware Distribution	3 h
🇯🇵97.74.89.162	29	3	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	12 h
🇸🇬97.74.85.78	29	3	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	15 h
🇸🇬148.66.142.9	28	2	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	33 h
🇸🇬148.66.133.188	27	4	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	46 min
🇯🇵68.178.171.254	23	3	Web Spam Port Scan Hacking Bad Web Bot Vulnerability Scan	18 h
🇯🇵68.178.165.162	23	3	Web Spam Port Scan Hacking Bad Web Bot Vulnerability Scan	18 h

What they were reported for

Where they are

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 16 minutes ago.