AS31205 PJSC MegaFon

Abuse reported against IP addresses announced by autonomous system 31205. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 8 IP addresses in AS31205 PJSC MegaFon were reported for abuse, in 40 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Vulnerability Scan, Command & Control and Port Scan. Most of them are in Russia.

8addresses reported, 30 days

0on the default blocklist (75+)

40reports against them

50 minsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇷🇺31.173.247.254	70	13	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	3 h
🇷🇺178.176.48.160	47	4	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	50 min
🇷🇺85.26.228.68	41	8	Phishing Web Spam Email Spam Port Scan Hacking Spoofing Bad Web Bot Web App Attack Mail Server Attack Vulnerability Scan Command & Control	12 h
🇷🇺188.162.11.15	38	4	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	50 min
🇷🇺85.26.230.158	37	5	Web Spam Port Scan Hacking Bad Web Bot Web App Attack Vulnerability Scan Command & Control	3 h
🇷🇺188.162.1.236	27	4	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	12 h
🇷🇺37.29.87.212	17	1	Brute-Force SSH Malware Distribution	27 h
🇷🇺78.25.92.114	11	1	Hacking Vulnerability Scan	27 h

What they were reported for

Where they are

🇷🇺 Russia8

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 17 minutes ago.