AS32475 Internap Holding LLC

Abuse reported against IP addresses announced by autonomous system 32475. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 25 IP addresses in AS32475 Internap Holding LLC were reported for abuse, in 77 reports altogether. 2 of them (8%) have a confidence score of 75 or more and are on the default blocklist. The most common reasons were Brute-Force, Bad Web Bot and Port Scan. Most of them are in United States.

25addresses reported, 30 days

2on the default blocklist (75+)

77reports against them

7 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇳🇱203.55.131.5	75	10	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇳🇱203.55.131.3	75	10	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇳🇱203.55.131.4	72	12	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇺🇸162.217.103.68	59	7	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	9 h
🇺🇸108.178.17.26	53	6	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack Vulnerability Scan Command & Control HTTP Flood	9 h
🇺🇸184.154.16.90	50	6	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	9 h
🇺🇸108.178.22.242	40	4	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	9 h
🇺🇸74.201.173.199	35	5	Phishing Web Spam Email Spam Port Scan Hacking Spoofing Bad Web Bot Mail Server Attack Vulnerability Scan	9 h
🇳🇱72.26.218.86	18	1	Brute-Force SSH Malware Distribution	9 h
🇺🇸72.251.233.245	18	1	Brute-Force SSH Malware Distribution	9 h
🇳🇱63.251.235.76	18	1	Brute-Force SSH Malware Distribution	9 h
🇺🇸63.251.106.25	18	1	Brute-Force SSH Malware Distribution	9 h
🇺🇸206.191.154.55	18	1	Brute-Force SSH Malware Distribution	9 h
🇺🇸206.191.152.58	18	1	Brute-Force SSH Malware Distribution	9 h
🇺🇸173.231.189.26	18	1	Brute-Force SSH Malware Distribution	9 h
🇺🇸173.231.189.15	18	1	Brute-Force SSH Malware Distribution	9 h
🇺🇸162.217.96.21	18	1	Brute-Force SSH Malware Distribution	9 h
🇺🇸184.154.36.176	14	1	Web Spam Port Scan Bad Web Bot	19 h
🇺🇸74.201.173.170	14	1	Web Spam Port Scan Bad Web Bot	19 h
🇺🇸65.60.34.138	14	1	Web Spam Port Scan Bad Web Bot	19 h

What they were reported for

Where they are

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 12 minutes ago.