ip,asn,as_description,cc,service_count,ports,software,greynoise_class,greynoise_tags 176.120.22.61,AS198953,proton66 - Proton66 OOO,RU,6,135;137;139;3389;5985;47001,http_api,malicious,"Looks Like Windows 7 server,MSSQL TDS PRELOGIN Scanner,MySQL Protocol,RDP Crawler,RDP Protocol,SSH Alternative Port Crawler,SSH Bruteforcer,SSH Connection Attempt,Web Crawler" 204.76.203.7,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,2,22;9001,nginx,malicious,"Carries HTTP Referer,CrushFTP Scanner,F5 BIG-IP Crawler,FTP Protocol,Generic IoT Default Password Attempt,Generic Open Redirect,Generic XSS Commands in Request,Go HTTP Client,ICMPv4 Protocol,Ivanti Co" 204.76.203.14,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,0,,,malicious,"AWS Configuration Scanner,Carries HTTP Referer,CrushFTP Scanner,ENV Crawler,F5 BIG-IP Crawler,Generic /proc Enumeration Attempt,Generic Login Attempt,Generic PHPInfo Access Attempt,Generic Path Traver" 45.135.193.193,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,1,22,,malicious,"Generic Path Traversal Attempt,Generic Sensitive File Access Attempt,Generic XSS Commands in Request,ICMPv4 Protocol,Looks Like Debian server,Open Proxy Scanner,Ping Scanner,TLS/SSL Crawler,Web Crawle" 204.76.203.49,AS51396,,,0,,,, 45.135.194.113,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,1,22,,malicious,"Carries HTTP Referer,Go HTTP Client,ICMPv4 Protocol,Looks Like Debian server,Open Proxy Scanner,Ping Scanner,SOCKS5 Proxy Scanner,Web Crawler" 45.135.193.198,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,1,22,,suspicious,"Generic XSS Commands in Request,ICMPv4 Protocol,Looks Like Debian server,Ping Scanner,TLS/SSL Crawler,Web Crawler" 204.76.203.4,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,1,22,,unknown, 176.120.22.43,AS198953,proton66 - Proton66 OOO,RU,1,3389,,malicious,"Cisco ASA Scanner,Cisco SSL VPN Bruteforcer,ConnectWise ScreenConnect Auth Bypass Check,CrushFTP Scanner,F5 BIG-IP Crawler,Generic Login Attempt,Generic Path Traversal Attempt,Looks Like Windows 10 la" 176.65.148.226,AS51396,PFCLOUD - Pfcloud UG (haftungsbeschrankt),DE,2,22;80,,malicious,"Carries HTTP Referer,ConnectWise ScreenConnect Auth Bypass Check,CrushFTP Scanner,DNS Protocol,F5 BIG-IP Crawler,Generic Sensitive File Access Attempt,Generic XSS Commands in Request,ICMPv4 Protocol,I"