AS38466 U Mobile Sdn Bhd

Abuse reported against IP addresses announced by autonomous system 38466. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 9 IP addresses in AS38466 U Mobile Sdn Bhd were reported for abuse, in 10 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Vulnerability Scan, Exploited Host and Command & Control. Most of them are in Malaysia.

9addresses reported, 30 days

0on the default blocklist (75+)

10reports against them

11 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇲🇾27.125.240.217	24	2	Phishing Email Spam Hacking Spoofing Mail Server Attack Vulnerability Scan	11 h
🇲🇾27.125.242.87	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d
🇲🇾27.125.242.83	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d
🇲🇾27.125.242.52	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d
🇲🇾27.125.242.125	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d
🇲🇾27.125.242.124	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d
🇲🇾27.125.242.123	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d
🇲🇾27.125.242.122	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d
🇲🇾2405:3800:9d3:14e0:104d:a3b:d771:d49c	13	1	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d

What they were reported for

Where they are

🇲🇾 Malaysia9

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 51 minutes ago.