AS397162 Sumofiber

Abuse reported against IP addresses announced by autonomous system 397162. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 3 IP addresses in AS397162 Sumofiber were reported for abuse, in 18 reports altogether. 1 of them (33%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were Vulnerability Scan, Hacking and Command & Control. Most of them are in United States.

3addresses reported, 30 days

1on the default blocklist (75+)

18reports against them

7 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇺🇸38.148.20.75	79	15	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Database Attack HTTP Flood Fake Accounts Telnet Abuse	7 h
🇺🇸38.148.20.134	27	2	Hacking Web App Attack Vulnerability Scan Command & Control	9 h
🇺🇸38.148.20.158	11	1	Hacking Vulnerability Scan	9 h

What they were reported for

Where they are

🇺🇸 United States3

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 8 minutes ago.