isIPsafe

AS151858 INTERDIGI JOINT STOCK COMPANY

Abuse reported against IP addresses announced by autonomous system 151858. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 78 IP addresses in AS151858 INTERDIGI JOINT STOCK COMPANY were reported for abuse, in 477 reports altogether. 2 of them (2%) have a confidence score of 75 or more and are on the default blocklist. The most common reasons were Port Scan, Bad Web Bot and Web Spam. Most of them are in Vietnam.

78addresses reported, 30 days
2on the default blocklist (75+)
477reports against them
2 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇻🇳103.195.237.134 78 16 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 15 h
🇻🇳103.195.236.196 77 25 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
🇻🇳103.245.236.153 72 23 Web SpamPort ScanHackingBrute-ForceBad Web BotWeb App AttackSSHVulnerability ScanCommand & Control 6 h
🇻🇳157.10.52.230 66 11 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 2 h
🇻🇳103.167.89.222 61 22 Web SpamPort ScanHackingBad Web BotWeb App AttackSSHVulnerability ScanCommand & Control 6 h
🇻🇳103.195.236.35 61 22 Web SpamPort ScanHackingBad Web BotWeb App AttackSSHVulnerability ScanCommand & Control 6 h
🇻🇳160.191.89.83 60 10 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
🇻🇳160.191.89.25 57 13 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 38 h
🇻🇳103.195.238.237 55 10 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
🇻🇳160.187.146.57 52 8 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 h
🇻🇳103.14.48.254 49 13 PhishingWeb SpamEmail SpamPort ScanHackingSpoofingBad Web BotWeb App AttackMail Server AttackVulnerability ScanCommand & Control 2 h
🇻🇳103.182.22.198 49 14 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
🇻🇳103.182.22.48 46 9 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
🇻🇳103.182.22.174 41 6 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 d
🇻🇳36.50.177.161 39 8 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & Control 2 h
🇻🇳103.118.28.144 33 6 Web SpamPort ScanHackingBad Web BotVulnerability Scan 2 h
🇻🇳103.20.96.51 33 10 Web SpamPort ScanHackingBad Web BotVulnerability Scan 6 h
🇻🇳103.195.237.209 32 5 Web SpamPort ScanBad Web BotWeb App AttackCommand & ControlHTTP Flood 2 h
🇻🇳103.195.236.189 32 3 Web SpamPort ScanBad Web BotWeb App AttackCommand & ControlHTTP Flood 2 h
🇻🇳103.75.182.236 32 9 Web SpamPort ScanBrute-ForceBad Web BotSSHMalware Distribution 6 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 20 minutes ago.