isIPsafe

AS131386 Long Van System Solution JSC

Abuse reported against IP addresses announced by autonomous system 131386. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 15 IP addresses in AS131386 Long Van System Solution JSC were reported for abuse, in 64 reports altogether. 1 of them (6%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were Bad Web Bot, Web Spam and Port Scan. Most of them are in Vietnam.

15addresses reported, 30 days
1on the default blocklist (75+)
64reports against them
1 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇻🇳45.119.81.245 76 11 Web SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & Control 1 h
🇻🇳103.200.25.79 71 8 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 1 h
🇻🇳45.119.81.156 71 10 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 7 h
🇻🇳45.119.85.159 70 10 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 1 h
🇻🇳103.200.25.198 67 9 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 10 h
🇻🇳103.27.238.172 39 4 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 7 h
🇻🇳45.119.81.30 39 3 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & Control 10 h
🇻🇳45.119.81.249 29 2 Web SpamPort ScanBrute-ForceBad Web BotSSHMalware Distribution 10 h
🇻🇳45.119.84.81 18 1 Brute-ForceSSHMalware Distribution 10 h
🇻🇳45.119.80.3 18 1 Brute-ForceSSHMalware Distribution 10 h
🇻🇳103.27.238.102 14 1 Web SpamPort ScanBad Web Bot 19 h
🇻🇳45.119.86.215 14 1 Web SpamPort ScanBad Web Bot 19 h
🇻🇳45.119.84.54 14 1 Web SpamPort ScanBad Web Bot 19 h
🇻🇳103.200.25.232 14 1 Web SpamPort ScanBad Web Bot 19 h
🇻🇳103.200.25.197 14 1 Web SpamPort ScanBad Web Bot 19 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 55 minutes ago.