isIPsafe

AS401401 Unredacted Inc

Abuse reported against IP addresses announced by autonomous system 401401. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 124 IP addresses in AS401401 Unredacted Inc were reported for abuse, in 912 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Tor Exit Node, Port Scan and Web Spam. Most of them are in United States.

124addresses reported, 30 days
0on the default blocklist (75+)
912reports against them
6 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇺🇸23.191.200.4 69 12 DNS PoisoningFTP Brute-ForceWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.46 65 11 DNS PoisoningFTP Brute-ForceWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.76 62 10 DNS PoisoningFTP Brute-ForceWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.9 60 11 DNS PoisoningFTP Brute-ForceWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.101 59 11 DNS PoisoningFTP Brute-ForceWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.26 59 11 DNS PoisoningFTP Brute-ForceWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.89 54 9 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & ControlTor Exit Node 6 h
🇺🇸23.191.200.17 47 9 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.114 46 8 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.84 46 8 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.118 46 8 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.36 46 8 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet AbuseTor Exit Node 6 h
🇺🇸23.191.200.95 44 8 Web SpamPort ScanHackingBad Web BotVulnerability ScanTor Exit Node 6 h
🇺🇸23.191.200.83 44 8 Web SpamPort ScanHackingBad Web BotVulnerability ScanTor Exit Node 6 h
🇺🇸23.191.200.7 44 8 Web SpamPort ScanHackingBad Web BotVulnerability ScanTor Exit Node 6 h
🇺🇸23.191.200.41 44 8 Web SpamPort ScanHackingBad Web BotVulnerability ScanTor Exit Node 6 h
🇺🇸23.191.200.70 44 8 Web SpamPort ScanHackingBad Web BotVulnerability ScanTor Exit Node 6 h
🇺🇸23.191.200.106 44 8 Web SpamPort ScanHackingBad Web BotVulnerability ScanTor Exit Node 6 h
🇺🇸23.191.200.123 44 8 Web SpamPort ScanHackingBad Web BotVulnerability ScanTor Exit Node 6 h
🇺🇸23.191.200.59 44 8 Web SpamPort ScanHackingBad Web BotVulnerability ScanTor Exit Node 6 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 11 minutes ago.