AS266356 PRONTO FIBRA LTDA

Abuse reported against IP addresses announced by autonomous system 266356. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 4 IP addresses in AS266356 PRONTO FIBRA LTDA were reported for abuse, in 8 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Bad Web Bot, DNS Poisoning and Command & Control. Most of them are in Brazil.

4addresses reported, 30 days

0on the default blocklist (75+)

8reports against them

14 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇧🇷170.239.227.69	28	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	20 h
🇧🇷170.239.227.41	26	2	Phishing Web Spam Email Spam Port Scan Spoofing Bad Web Bot Mail Server Attack	14 h
🇧🇷2804:3690:8001:b530:71f4:b288:a145:80f	14	2	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	2 d
🇧🇷187.121.225.205	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d

What they were reported for

Where they are

🇧🇷 Brazil4

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 53 minutes ago.