isIPsafe

AS58541 Qingdao,266000

Abuse reported against IP addresses announced by autonomous system 58541. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 17 IP addresses in AS58541 Qingdao,266000 were reported for abuse, in 43 reports altogether. 1 of them (5%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were Port Scan, Web Spam and Bad Web Bot. Most of them are in China.

17addresses reported, 30 days
1on the default blocklist (75+)
43reports against them
6 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇨🇳150.139.201.247 76 8 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 12 h
🇨🇳150.139.194.15 65 5 DNS PoisoningWeb SpamPort ScanHackingSQL InjectionBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 12 h
🇨🇳140.249.189.35 60 8 Web SpamPort ScanHackingBad Web BotWeb App AttackSSHVulnerability ScanCommand & Control 6 h
🇨🇳140.249.22.89 52 6 Web SpamPort ScanHackingBad Web BotWeb App AttackSSHVulnerability ScanCommand & Control 14 h
🇨🇳150.138.115.76 43 3 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & Control 14 h
🇨🇳140.249.196.155 32 2 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 14 h
🇨🇳150.139.197.43 18 1 Brute-ForceSSHMalware Distribution 14 h
🇨🇳140.249.216.218 18 1 Brute-ForceSSHMalware Distribution 14 h
🇨🇳140.249.187.232 18 1 Brute-ForceSSHMalware Distribution 14 h
🇨🇳140.249.163.33 18 1 Brute-ForceSSHMalware Distribution 14 h
🇨🇳140.249.23.247 17 1 Web SpamPort ScanBad Web Bot 24 h
🇨🇳150.138.142.132 14 1 Web SpamPort ScanBad Web Bot 18 h
🇨🇳140.249.55.134 14 1 Web SpamPort ScanBad Web Bot 24 h
🇨🇳140.249.54.10 14 1 Web SpamPort ScanBad Web Bot 24 h
🇨🇳140.249.52.147 14 1 Web SpamPort ScanBad Web Bot 24 h
🇨🇳140.249.18.219 14 1 Web SpamPort ScanBad Web Bot 24 h
🇨🇳150.139.198.126 14 1 Web SpamPort ScanBad Web Bot 24 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 59 minutes ago.