isIPsafe

AS134489 S. B Link Network

Abuse reported against IP addresses announced by autonomous system 134489. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 40 IP addresses in AS134489 S. B Link Network were reported for abuse, in 271 reports altogether. 1 of them (2%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were Bad Web Bot, Port Scan and Web Spam. Most of them are in Pakistan.

40addresses reported, 30 days
1on the default blocklist (75+)
271reports against them
1 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇵🇰203.128.10.201 78 29 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 5 h
🇵🇰203.128.10.200 73 28 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 8 h
🇵🇰203.128.10.90 57 27 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostWeb App AttackSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 1 h
🇵🇰203.128.10.43 57 14 DNS PoisoningFTP Brute-ForceWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 8 h
🇵🇰149.71.34.141 57 31 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostWeb App AttackSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 8 h
🇵🇰203.128.10.182 56 17 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 8 h
🇵🇰203.128.10.58 46 13 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 4 h
🇵🇰111.92.146.28 40 6 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 d
🇵🇰203.128.10.149 32 4 Web SpamPort ScanBad Web BotExploited Host 4 h
🇵🇰160.30.104.40 32 2 Web SpamPort ScanBad Web BotWeb App AttackCommand & ControlHTTP Flood 4 h
🇵🇰203.128.10.139 32 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 4 h
🇵🇰203.128.10.132 32 11 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 8 h
🇵🇰149.71.34.154 32 6 Web SpamPort ScanHackingBad Web BotVulnerability Scan 26 h
🇵🇰203.128.10.151 31 2 Web SpamPort ScanBad Web BotWeb App AttackCommand & ControlHTTP Flood 21 h
🇵🇰203.128.10.128 31 3 Web SpamPort ScanBad Web BotExploited Host 28 h
🇵🇰203.128.10.134 28 7 Web SpamPort ScanHackingBad Web BotVulnerability Scan 8 h
🇵🇰203.128.10.129 18 6 Web SpamPort ScanBad Web Bot 2 h
🇵🇰203.128.10.40 18 3 Web SpamPort ScanBad Web Bot 4 h
🇵🇰203.128.10.147 18 1 Web SpamPort ScanBad Web Bot 4 h
🇵🇰203.128.10.59 18 2 Web SpamPort ScanBad Web Bot 4 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 6 minutes ago.