isIPsafe

AS58895 E Bone Network (Pvt.) Limited

Abuse reported against IP addresses announced by autonomous system 58895. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 13 IP addresses in AS58895 E Bone Network (Pvt.) Limited were reported for abuse, in 45 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Bad Web Bot, Command & Control and Exploited Host. Most of them are in Pakistan.

13addresses reported, 30 days
0on the default blocklist (75+)
45reports against them
3 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇵🇰119.152.102.54 68 12 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostWeb App AttackSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 h
🇵🇰119.152.54.111 65 10 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostWeb App AttackSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 h
🇵🇰123.108.95.154 57 7 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 7 h
🇵🇰43.246.220.214 37 3 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 7 h
🇵🇰43.229.165.194 37 3 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 7 h
🇵🇰116.213.35.2 29 2 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇵🇰103.39.82.242 14 1 Web SpamPort ScanBad Web Bot 13 h
🇵🇰103.83.23.169 14 1 Web SpamPort ScanBad Web Bot 13 h
🇵🇰103.193.18.18 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇰103.57.171.209 14 2 DNS PoisoningSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 d
🇵🇰123.253.94.43 13 1 DNS PoisoningSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 d
🇵🇰103.57.171.0 13 1 DNS PoisoningSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 d
🇵🇰103.102.157.206 13 1 DNS PoisoningSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 4 d

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 34 minutes ago.