AS36992 ETISALAT MISR

Abuse reported against IP addresses announced by autonomous system 36992. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 33 IP addresses in AS36992 ETISALAT MISR were reported for abuse, in 121 reports altogether. 1 of them (3%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were Bad Web Bot, Vulnerability Scan and Command & Control. Most of them are in Egypt.

33addresses reported, 30 days

1on the default blocklist (75+)

121reports against them

2 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇪🇬62.193.91.121	82	11	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	2 h
🇪🇬41.153.30.124	70	10	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	10 h
🇪🇬197.199.224.52	68	9	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control	2 h
🇪🇬41.64.172.51	66	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	8 h
🇪🇬41.65.68.75	62	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	8 h
🇪🇬105.203.240.28	61	8	Web Spam Port Scan Hacking Bad Web Bot Web App Attack SSH Vulnerability Scan Command & Control	2 h
🇪🇬194.79.103.229	56	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	10 h
🇪🇬41.153.30.115	50	4	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	10 h
🇪🇬197.120.67.95	47	7	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host Web App Attack SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	10 h
🇪🇬84.36.25.114	39	4	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	8 h
🇪🇬41.65.118.172	39	3	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	10 h
🇪🇬41.65.74.21	35	3	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	10 h
🇪🇬84.36.11.162	26	2	Web Spam Port Scan Hacking Bad Web Bot Vulnerability Scan	10 h
🇪🇬84.36.122.150	24	2	Web Spam Port Scan Hacking Bad Web Bot Vulnerability Scan	10 h
🇪🇬62.139.219.120	24	2	Web Spam Port Scan Hacking Bad Web Bot Vulnerability Scan	10 h
🇪🇬217.54.34.205	21	6	DNS Poisoning Phishing Email Spam SQL Injection Spoofing Bad Web Bot Exploited Host SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	42 h
🇪🇬197.120.147.91	15	1	Phishing Email Spam Spoofing Mail Server Attack	4 h
🇪🇬154.236.179.229	14	1	Web Spam Port Scan Bad Web Bot	14 h
🇪🇬62.193.106.227	14	1	Web Spam Port Scan Bad Web Bot	19 h
🇪🇬41.153.30.114	14	1	Web Spam Port Scan Bad Web Bot	20 h

What they were reported for

Where they are

🇪🇬 Egypt33

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 9 minutes ago.