isIPsafe

AS9658 Eastern Telecommunications Philippines, Inc.

Abuse reported against IP addresses announced by autonomous system 9658. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 20 IP addresses in AS9658 Eastern Telecommunications Philippines, Inc. were reported for abuse, in 48 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Web Spam, Bad Web Bot and Port Scan. Most of them are in Philippines.

20addresses reported, 30 days
0on the default blocklist (75+)
48reports against them
1 hsince the latest report

Most reported addresses

AddressScoreReportsCategoriesLast seen
🇵🇭180.232.31.158 68 9 DNS PoisoningFTP Brute-ForcePhishingOpen ProxyWeb SpamPort ScanHackingSQL InjectionBrute-ForceBad Web BotExploited HostWeb App AttackSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseHTTP FloodFake AccountsTelnet Abuse 7 h
🇵🇭61.28.144.154 65 9 Web SpamPort ScanHackingBad Web BotWeb App AttackSSHVulnerability ScanCommand & Control 1 h
🇵🇭180.232.74.78 48 3 Web SpamPort ScanHackingBad Web BotWeb App AttackVulnerability ScanCommand & Control 9 h
🇵🇭61.28.141.98 42 5 DNS PoisoningPhishingWeb SpamEmail SpamPort ScanSQL InjectionSpoofingBad Web BotExploited HostSSHMail Server AttackVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 7 h
🇵🇭112.199.95.67 39 5 DNS PoisoningWeb SpamPort ScanSQL InjectionBad Web BotExploited HostSSHVulnerability ScanMalware DistributionCommand & ControlAPI AbuseFake AccountsTelnet Abuse 19 h
🇵🇭112.199.113.210 32 2 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇵🇭115.85.57.170 29 2 Web SpamPort ScanBad Web BotWeb App AttackCommand & Control 9 h
🇵🇭115.85.61.229 18 1 Web App AttackCommand & Control 9 h
🇵🇭180.232.31.146 18 1 Brute-ForceSSHMalware Distribution 9 h
🇵🇭116.50.169.5 14 1 PhishingEmail SpamSpoofingMail Server Attack 11 h
🇵🇭180.232.163.170 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇭120.89.35.90 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇭115.85.57.57 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇭202.175.241.170 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇭116.50.179.74 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇭112.199.121.82 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇭120.89.58.131 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇭180.232.148.74 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇭180.232.215.174 14 1 Web SpamPort ScanBad Web Bot 19 h
🇵🇭180.232.116.34 13 1 FTP Brute-ForcePhishingOpen ProxyWeb SpamBrute-ForceWeb App AttackCommand & ControlHTTP Flood 4 d

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 12 minutes ago.