isIPsafe

AS15802 Emirates Integrated Telecommunications Company PJSC

Abuse reported against IP addresses announced by autonomous system 15802. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 84 IP addresses in AS15802 Emirates Integrated Telecommunications Company PJSC were reported for abuse, in 182 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were SSH, Malware Distribution and Bad Web Bot. Most of them are in United Arab Emirates.

84addresses reported, 30 days
0on the default blocklist (75+)
182reports against them
2 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
πŸ‡¦πŸ‡ͺ94.204.5.49 69 7 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
πŸ‡¦πŸ‡ͺ5.32.107.6 68 10 PhishingWeb SpamEmail SpamPort ScanHackingSpoofingBrute-ForceBad Web BotWeb App AttackSSHMail Server AttackVulnerability ScanMalware DistributionCommand & Control 2 h
πŸ‡¦πŸ‡ͺ80.227.102.242 62 9 PhishingWeb SpamEmail SpamPort ScanHackingSpoofingBrute-ForceBad Web BotWeb App AttackSSHMail Server AttackVulnerability ScanMalware DistributionCommand & Control 9 h
πŸ‡¦πŸ‡ͺ5.32.99.14 61 9 PhishingWeb SpamEmail SpamPort ScanHackingSpoofingBad Web BotWeb App AttackMail Server AttackVulnerability ScanCommand & Control 2 h
πŸ‡¦πŸ‡ͺ5.32.61.6 61 9 PhishingWeb SpamEmail SpamPort ScanHackingSpoofingBad Web BotWeb App AttackMail Server AttackVulnerability ScanCommand & Control 2 h
πŸ‡¦πŸ‡ͺ5.30.181.240 59 5 DNS PoisoningFTP Brute-ForceWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 h
πŸ‡¦πŸ‡ͺ94.205.250.78 54 10 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostWeb App AttackSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
πŸ‡¦πŸ‡ͺ91.72.153.110 54 8 PhishingWeb SpamEmail SpamPort ScanHackingSpoofingBad Web BotWeb App AttackMail Server AttackVulnerability ScanCommand & Control 9 h
πŸ‡¦πŸ‡ͺ94.206.93.90 52 7 PhishingWeb SpamEmail SpamPort ScanHackingSpoofingBad Web BotWeb App AttackMail Server AttackVulnerability ScanCommand & Control 9 h
πŸ‡¦πŸ‡ͺ94.207.68.25 46 4 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
πŸ‡¦πŸ‡ͺ5.30.96.90 46 4 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 9 h
πŸ‡¦πŸ‡ͺ80.227.147.94 44 7 PhishingWeb SpamEmail SpamPort ScanHackingSpoofingBad Web BotWeb App AttackMail Server AttackVulnerability ScanCommand & Control 9 h
πŸ‡¦πŸ‡ͺ91.72.184.50 43 3 FTP Brute-ForceWeb SpamPort ScanHackingBrute-ForceBad Web BotCredential StuffingVulnerability Scan 9 h
πŸ‡¦πŸ‡ͺ94.204.18.32 40 3 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
πŸ‡¦πŸ‡ͺ94.202.62.6 40 3 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
πŸ‡¦πŸ‡ͺ5.31.233.126 40 3 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
πŸ‡¦πŸ‡ͺ91.74.28.57 35 3 PhishingWeb SpamEmail SpamPort ScanHackingSpoofingBad Web BotMail Server AttackVulnerability Scan 9 h
πŸ‡¦πŸ‡ͺ87.201.127.149 29 2 Web SpamPort ScanBrute-ForceBad Web BotSSHMalware Distribution 9 h
πŸ‡¦πŸ‡ͺ5.30.222.55 27 2 HackingWeb App AttackVulnerability ScanCommand & Control 9 h
πŸ‡¦πŸ‡ͺ94.205.205.153 27 2 PhishingWeb SpamEmail SpamPort ScanSpoofingBad Web BotMail Server Attack 12 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 2 minutes ago.