isIPsafe

AS135198 Bombay Bullion Commmunication

Abuse reported against IP addresses announced by autonomous system 135198. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 11 IP addresses in AS135198 Bombay Bullion Commmunication were reported for abuse, in 53 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Command & Control, Web App Attack and Bad Web Bot. Most of them are in India.

11addresses reported, 30 days
0on the default blocklist (75+)
53reports against them
3 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇮🇳103.216.170.141 49 8 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 h
🇮🇳103.216.170.143 49 8 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 h
🇮🇳103.216.170.145 49 8 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 h
🇮🇳103.216.170.48 49 7 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 9 h
🇮🇳103.216.171.222 40 5 Web SpamPort ScanBad Web BotWeb App AttackSSHCommand & Control 9 h
🇮🇳103.216.170.172 39 4 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanBrute-ForceBad Web BotWeb App AttackCommand & ControlHTTP Flood 9 h
🇮🇳103.216.170.144 30 4 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 3 h
🇮🇳103.216.170.129 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 3 h
🇮🇳103.216.170.13 30 2 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 6 h
🇮🇳103.216.171.220 30 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇮🇳103.216.170.15 18 1 Web App AttackCommand & Control 9 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 22 minutes ago.