AS140318 China Telecom

Abuse reported against IP addresses announced by autonomous system 140318. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 7 IP addresses in AS140318 China Telecom were reported for abuse, in 14 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were SSH, Brute-Force and Malware Distribution. Most of them are in China.

7addresses reported, 30 days

0on the default blocklist (75+)

14reports against them

3 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇨🇳219.129.96.2	52	8	Phishing Web Spam Email Spam Port Scan Hacking Spoofing Bad Web Bot Web App Attack Mail Server Attack Vulnerability Scan Command & Control	3 h
🇨🇳183.1.87.213	27	1	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	7 h
🇨🇳219.129.107.106	18	1	Brute-Force SSH Malware Distribution	10 h
🇨🇳219.129.105.50	18	1	Brute-Force SSH Malware Distribution	10 h
🇨🇳219.129.105.34	18	1	Brute-Force SSH Malware Distribution	10 h
🇨🇳14.149.70.51	14	1	Web Spam Port Scan Bad Web Bot	13 h
🇨🇳183.1.87.194	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d

What they were reported for

Where they are

🇨🇳 China7

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 50 minutes ago.