AS201670 S.C. INFOTECH-GRUP S.R.L.

Abuse reported against IP addresses announced by autonomous system 201670. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 15 IP addresses in AS201670 S.C. INFOTECH-GRUP S.R.L. were reported for abuse, in 34 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Bad Web Bot, SSH and Command & Control. Most of them are in Moldova.

15addresses reported, 30 days

0on the default blocklist (75+)

34reports against them

8 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇲🇩132.243.165.81	37	4	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	8 h
🇲🇩132.243.164.210	37	4	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	8 h
🇲🇩132.243.165.83	28	2	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	19 h
🇲🇩132.243.164.228	28	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	19 h
🇲🇩132.243.165.77	28	4	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	19 h
🇲🇩2a0c:b641:3a1:1009::1f5	27	3	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	8 h
🇲🇩2a0c:b641:3a1:1004::4d8	27	2	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	8 h
🇲🇩2a0c:b641:3a1:1004::12b	27	3	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	8 h
🇲🇩2a0c:b641:3a1:1009::1f4	15	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	42 h
🇲🇩2a0c:b641:3a1:1008::3ff	15	2	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	42 h
🇲🇩93.185.165.199	14	1	Web Spam Port Scan Bad Web Bot	19 h
🇲🇩93.185.165.76	14	1	Web Spam Port Scan Bad Web Bot	19 h
🇲🇩93.185.165.225	14	1	Web Spam Port Scan Bad Web Bot	19 h
🇲🇩93.185.165.80	14	1	Web Spam Port Scan Bad Web Bot	19 h
🇲🇩2a0c:b641:3a1:1004::3eb	14	2	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	2 d

What they were reported for

Where they are

🇲🇩 Moldova15

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 8 minutes ago.