AS30998 NAL-AS

Abuse reported against IP addresses announced by autonomous system 30998. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 4 IP addresses in AS30998 NAL-AS were reported for abuse, in 25 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Vulnerability Scan, Hacking and Command & Control. Most of them are in Nigeria.

4addresses reported, 30 days

0on the default blocklist (75+)

25reports against them

2 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇳🇬41.219.149.78	59	9	Phishing Web Spam Email Spam Port Scan Hacking Spoofing Bad Web Bot Web App Attack Mail Server Attack Vulnerability Scan Command & Control	2 h
🇳🇬41.219.149.77	59	12	Phishing Web Spam Email Spam Port Scan Hacking Spoofing Bad Web Bot Web App Attack Mail Server Attack Vulnerability Scan Command & Control	5 h
🇳🇬41.219.149.74	27	3	Hacking Web App Attack Vulnerability Scan Command & Control	5 h
🇳🇬41.67.143.142	17	1	Brute-Force SSH Malware Distribution	29 h

What they were reported for

Where they are

🇳🇬 Nigeria4

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 14 minutes ago.