AS133989 SBR Telecom Pvt. Ltd

Abuse reported against IP addresses announced by autonomous system 133989. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 8 IP addresses in AS133989 SBR Telecom Pvt. Ltd were reported for abuse, in 22 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Bad Web Bot, Command & Control and DNS Poisoning. Most of them are in India.

8addresses reported, 30 days

0on the default blocklist (75+)

22reports against them

10 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇮🇳103.110.6.213	48	5	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	10 h
🇮🇳111.223.0.254	34	4	DNS Poisoning FTP Brute-Force SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	2 d
🇮🇳111.223.3.176	32	7	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	22 h
🇮🇳103.84.202.138	18	2	DNS Poisoning Phishing Email Spam SQL Injection Spoofing Bad Web Bot Exploited Host SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d
🇮🇳103.55.104.50	17	1	Web Spam Port Scan Bad Web Bot	22 h
🇮🇳111.223.3.83	14	1	Web Spam Port Scan Bad Web Bot	22 h
🇮🇳111.223.3.161	14	1	Web Spam Port Scan Bad Web Bot	22 h
🇮🇳103.101.103.102	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d

What they were reported for

Where they are

🇮🇳 India8

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 42 minutes ago.