isIPsafe

AS28840 PJSC "TATTELECOM"

Abuse reported against IP addresses announced by autonomous system 28840. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 21 IP addresses in AS28840 PJSC "TATTELECOM" were reported for abuse, in 52 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Web Spam, Bad Web Bot and Port Scan. Most of them are in Russia.

21addresses reported, 30 days
0on the default blocklist (75+)
52reports against them
3 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇷🇺78.138.168.46 66 12 Web SpamPort ScanHackingBad Web BotWeb App AttackSSHVulnerability ScanCommand & Control 6 h
🇷🇺188.225.105.205 57 9 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 6 h
🇷🇺178.204.207.209 27 1 FTP Brute-ForcePhishingOpen ProxyWeb SpamBrute-ForceWeb App AttackCommand & ControlHTTP Flood 3 h
🇷🇺178.206.166.187 26 4 DNS PoisoningSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 d
🇷🇺89.232.74.126 23 3 Web SpamPort ScanHackingBad Web BotVulnerability Scan 15 h
🇷🇺185.6.81.48 17 1 Brute-ForceSSHMalware Distribution 30 h
🇷🇺178.205.101.181 17 1 Brute-ForceSSHMalware Distribution 30 h
🇷🇺178.205.156.65 14 1 Web SpamPort ScanBad Web Bot 9 h
🇷🇺178.205.47.225 14 1 Web SpamPort ScanBad Web Bot 9 h
🇷🇺178.206.223.111 14 1 Web SpamPort ScanBad Web Bot 9 h
🇷🇺178.206.175.149 14 2 Web SpamPort ScanBad Web Bot 9 h
🇷🇺217.118.188.122 14 2 Web SpamPort ScanBad Web Bot 15 h
🇷🇺178.206.231.147 14 2 Web SpamPort ScanBad Web Bot 15 h
🇷🇺178.205.20.98 14 2 Web SpamPort ScanBad Web Bot 15 h
🇷🇺84.18.119.120 14 2 Web SpamPort ScanBad Web Bot 15 h
🇷🇺178.207.188.106 14 2 Web SpamPort ScanBad Web Bot 15 h
🇷🇺178.207.8.54 14 2 Web SpamPort ScanBad Web Bot 15 h
🇷🇺178.206.43.197 14 1 Web SpamPort ScanBad Web Bot 33 h
🇷🇺178.207.100.233 14 1 Web SpamPort ScanBad Web Bot 33 h
🇷🇺178.204.21.220 14 1 Web SpamPort ScanBad Web Bot 33 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 13 minutes ago.