isIPsafe

AS6697 Republican Unitary Telecommunication Enterprise Beltelecom

Abuse reported against IP addresses announced by autonomous system 6697. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 102 IP addresses in AS6697 Republican Unitary Telecommunication Enterprise Beltelecom were reported for abuse, in 236 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Port Scan, Bad Web Bot and Command & Control. Most of them are in Belarus.

102addresses reported, 30 days
0on the default blocklist (75+)
236reports against them
3 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
πŸ‡§πŸ‡Ύ37.45.197.248 51 7 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 45 h
πŸ‡§πŸ‡Ύ178.124.147.230 50 9 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 18 h
πŸ‡§πŸ‡Ύ37.215.44.212 45 7 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 d
πŸ‡§πŸ‡Ύ37.215.42.166 45 7 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 d
πŸ‡§πŸ‡Ύ37.215.34.71 45 7 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 d
πŸ‡§πŸ‡Ύ37.212.81.170 45 7 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 d
πŸ‡§πŸ‡Ύ37.212.2.198 43 7 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanHackingSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 3 d
πŸ‡§πŸ‡Ύ37.45.197.13 40 4 FTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanBrute-ForceBad Web BotWeb App AttackCommand & ControlHTTP Flood 5 h
πŸ‡§πŸ‡Ύ178.125.115.103 40 13 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 2 d
πŸ‡§πŸ‡Ύ37.212.10.226 35 5 DNS PoisoningFTP Brute-ForceWeb SpamPort ScanSQL InjectionBrute-ForceBad Web BotExploited HostSSHCredential StuffingVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 5 d
πŸ‡§πŸ‡Ύ93.85.228.155 32 2 Web SpamPort ScanBad Web BotWeb App AttackCommand & ControlHTTP Flood 5 h
πŸ‡§πŸ‡Ύ86.57.226.122 27 6 Web SpamPort ScanHackingBad Web BotVulnerability Scan 5 h
πŸ‡§πŸ‡Ύ37.45.45.157 27 3 Web SpamPort ScanHackingBad Web BotVulnerability Scan 5 h
πŸ‡§πŸ‡Ύ93.85.226.11 26 5 Web SpamPort ScanHackingBad Web BotVulnerability Scan 24 h
πŸ‡§πŸ‡Ύ194.158.207.61 25 5 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 5 d
πŸ‡§πŸ‡Ύ93.84.111.127 22 5 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 6 d
πŸ‡§πŸ‡Ύ37.214.200.20 20 4 Web SpamPort ScanHackingBad Web BotVulnerability Scan 3 d
πŸ‡§πŸ‡Ύ37.214.8.241 18 5 Web SpamPort ScanBad Web Bot 3 h
πŸ‡§πŸ‡Ύ178.122.101.36 18 1 Web SpamPort ScanBad Web Bot 5 h
πŸ‡§πŸ‡Ύ37.214.8.120 18 2 Web SpamPort ScanBad Web Bot 5 h

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 41 minutes ago.