isIPsafe

AS133481 ADVANCED WIRELESS NETWORK COMPANY LIMITED

Abuse reported against IP addresses announced by autonomous system 133481. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 59 IP addresses in AS133481 ADVANCED WIRELESS NETWORK COMPANY LIMITED were reported for abuse, in 166 reports altogether. 1 of them (1%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were Bad Web Bot, Vulnerability Scan and Web Spam. Most of them are in Thailand.

59addresses reported, 30 days
1on the default blocklist (75+)
166reports against them
4 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
πŸ‡ΉπŸ‡­27.130.182.136 75 11 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
πŸ‡ΉπŸ‡­49.0.87.123 66 11 Web SpamPort ScanHackingBad Web BotWeb App AttackSSHVulnerability ScanCommand & Control 4 h
πŸ‡ΉπŸ‡­27.130.36.227 63 10 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
πŸ‡ΉπŸ‡­27.130.116.175 58 5 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 16 h
πŸ‡ΉπŸ‡­27.130.61.124 56 7 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 18 h
πŸ‡ΉπŸ‡­58.136.243.51 52 8 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
πŸ‡ΉπŸ‡­184.22.151.143 48 6 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
πŸ‡ΉπŸ‡­27.130.199.225 44 5 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
πŸ‡ΉπŸ‡­58.136.235.118 42 6 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
πŸ‡ΉπŸ‡­27.130.205.135 37 4 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
πŸ‡ΉπŸ‡­184.82.13.88 37 4 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
πŸ‡ΉπŸ‡­27.130.160.33 37 3 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 16 h
πŸ‡ΉπŸ‡­27.130.108.49 33 4 DNS PoisoningFTP Brute-ForceSQL InjectionBrute-ForceBad Web BotExploited HostSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 d
πŸ‡ΉπŸ‡­58.136.228.80 28 3 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 28 h
πŸ‡ΉπŸ‡­27.130.108.122 28 3 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 28 h
πŸ‡ΉπŸ‡­27.130.121.222 28 2 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 2 d
πŸ‡ΉπŸ‡­27.130.71.38 27 4 DNS PoisoningSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 d
πŸ‡ΉπŸ‡­49.228.13.204 26 2 Web SpamPort ScanHackingBad Web BotVulnerability Scan 18 h
πŸ‡ΉπŸ‡­27.130.116.148 26 2 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 3 d
πŸ‡ΉπŸ‡­58.136.109.6 24 3 Web SpamPort ScanHackingBad Web BotVulnerability Scan 4 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 42 minutes ago.