AS138423 CMPak Limited

Abuse reported against IP addresses announced by autonomous system 138423. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 57 IP addresses in AS138423 CMPak Limited were reported for abuse, in 151 reports altogether. 1 of them (1%) has a confidence score of 75 or more and is on the default blocklist. The most common reasons were Bad Web Bot, Web Spam and Command & Control. Most of them are in Pakistan.

57addresses reported, 30 days

1on the default blocklist (75+)

151reports against them

1 hsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇵🇰117.134.199.10	79	18	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇵🇰223.123.43.245	51	4	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	21 h
🇵🇰223.123.43.246	51	4	DNS Poisoning FTP Brute-Force Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	21 h
🇵🇰223.123.38.66	50	6	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	1 h
🇵🇰223.123.43.44	49	7	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	19 h
🇵🇰117.134.206.98	46	5	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	1 h
🇵🇰223.123.35.125	46	4	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	7 h
🇵🇰223.123.32.194	40	3	DNS Poisoning FTP Brute-Force Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	31 h
🇵🇰223.123.43.17	38	2	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	19 h
🇵🇰223.123.42.238	38	4	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	19 h
🇵🇰223.123.44.116	37	5	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	25 h
🇵🇰223.123.42.234	31	2	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	21 h
🇵🇰223.123.43.196	29	3	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	7 h
🇵🇰223.123.42.239	29	2	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	21 h
🇵🇰223.123.43.139	29	2	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	21 h
🇵🇰223.123.43.252	29	2	Web Spam Port Scan Bad Web Bot Web App Attack Command & Control	21 h
🇵🇰223.123.124.125	28	3	FTP Brute-Force Phishing Open Proxy Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack Command & Control HTTP Flood	7 h
🇵🇰223.123.43.18	28	4	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	41 h
🇵🇰223.123.43.68	28	6	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	2 d
🇵🇰223.123.43.2	28	2	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	2 d

What they were reported for

Where they are

🇵🇰 Pakistan57

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 57 minutes ago.