isIPsafe

AS263780 Global Telecomunicaciones SRL

Abuse reported against IP addresses announced by autonomous system 263780. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 9 IP addresses in AS263780 Global Telecomunicaciones SRL were reported for abuse, in 29 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were DNS Poisoning, SQL Injection and Command & Control. Most of them are in Argentina.

9addresses reported, 30 days
0on the default blocklist (75+)
29reports against them
4 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇦🇷170.78.125.114 46 5 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
🇦🇷170.78.125.244 37 5 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 h
🇦🇷170.78.125.139 31 5 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 34 h
🇦🇷170.78.125.26 26 1 DNS PoisoningSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 22 h
🇦🇷170.78.125.71 19 4 DNS PoisoningPhishingEmail SpamSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 d
🇦🇷170.78.125.88 19 4 DNS PoisoningPhishingEmail SpamSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 d
🇦🇷170.78.125.41 17 2 DNS PoisoningPhishingEmail SpamSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 d
🇦🇷170.78.125.226 14 2 DNS PoisoningSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 d
🇦🇷170.78.125.129 12 1 DNS PoisoningSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 d

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 25 minutes ago.