AS48161 NEXTGEN COMMUNICATIONS SRL

Abuse reported against IP addresses announced by autonomous system 48161. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 9 IP addresses in AS48161 NEXTGEN COMMUNICATIONS SRL were reported for abuse, in 11 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were SSH, Malware Distribution and Brute-Force. Most of them are in Romania.

9addresses reported, 30 days

0on the default blocklist (75+)

11reports against them

8 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇷🇴89.165.221.215	37	2	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	8 h
🇷🇴94.53.199.67	29	2	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	11 h
🇷🇴94.53.155.34	18	1	Brute-Force SSH Malware Distribution	11 h
🇷🇴94.53.120.171	18	1	Brute-Force SSH Malware Distribution	11 h
🇷🇴94.52.209.104	18	1	Brute-Force SSH Malware Distribution	11 h
🇷🇴46.214.4.29	18	1	Brute-Force SSH Malware Distribution	11 h
🇷🇴46.214.230.39	18	1	Brute-Force SSH Malware Distribution	11 h
🇷🇴94.52.22.73	14	1	Web Spam Port Scan Bad Web Bot	14 h
🇷🇴46.214.153.223	14	1	Web Spam Port Scan Bad Web Bot	20 h

What they were reported for

Where they are

🇷🇴 Romania9

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 44 minutes ago.