AS34867 Cosmonova LLC

Abuse reported against IP addresses announced by autonomous system 34867. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 6 IP addresses in AS34867 Cosmonova LLC were reported for abuse, in 28 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Port Scan, Bad Web Bot and Command & Control. Most of them are in Ukraine.

6addresses reported, 30 days

0on the default blocklist (75+)

28reports against them

3 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇺🇦95.67.13.36	68	17	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇺🇦95.67.84.216	20	2	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	7 d
🇺🇦95.67.126.38	18	3	Web App Attack Command & Control	13 h
🇺🇦95.67.96.53	14	4	Web Spam Port Scan Bad Web Bot	16 h
🇺🇦95.67.59.214	4	1	VoIP Fraud Port Scan	3 h
🇺🇦95.67.14.116	4	1	VoIP Fraud Port Scan	3 h

What they were reported for

Where they are

🇺🇦 Ukraine6

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 50 minutes ago.