AS35042 Layer7 Networks GmbH

Abuse reported against IP addresses announced by autonomous system 35042. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 12 IP addresses in AS35042 Layer7 Networks GmbH were reported for abuse, in 66 reports altogether. 3 of them (25%) have a confidence score of 75 or more and are on the default blocklist. The most common reasons were Malware Distribution, SSH and Brute-Force. Most of them are in Hong Kong.

12addresses reported, 30 days

3on the default blocklist (75+)

66reports against them

7 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇭🇰88.214.25.125	79	13	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	8 h
🇭🇰88.214.25.121	76	13	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	8 h
🇭🇰88.214.25.124	76	14	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	8 h
🇩🇪193.24.210.138	56	10	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	8 h
🇭🇰88.214.25.123	53	6	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	8 h
🇩🇪193.24.209.35	37	4	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	7 h
🇭🇰88.214.25.65	17	1	Brute-Force SSH Malware Distribution	22 h
🇭🇰88.214.25.64	17	1	Brute-Force SSH Malware Distribution	22 h
🇭🇰88.214.25.63	17	1	Brute-Force SSH Malware Distribution	22 h
🇭🇰88.214.25.62	17	1	Brute-Force SSH Malware Distribution	22 h
🇭🇰88.214.25.61	17	1	Brute-Force SSH Malware Distribution	22 h
🇭🇰88.214.25.16	17	1	Brute-Force SSH Malware Distribution	22 h

What they were reported for

Where they are

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 35 minutes ago.