AS17639 ComClark Network & Technology Corp

Abuse reported against IP addresses announced by autonomous system 17639. If you run this network, the addresses below are a good place to start an abuse investigation.

In the last 30 days, 100 IP addresses in AS17639 ComClark Network & Technology Corp were reported for abuse, in 233 reports altogether. None of them has a confidence score high enough for the default blocklist yet. The most common reasons were Bad Web Bot, Vulnerability Scan and Command & Control. Most of them are in Philippines.

100addresses reported, 30 days

0on the default blocklist (75+)

233reports against them

55 minsince the latest report

Most reported addresses

Address	Score	Reports	Categories	Last seen
🇵🇭161.49.89.39	68	9	Web Spam Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control	55 min
🇵🇭139.135.184.155	68	6	DNS Poisoning FTP Brute-Force Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	6 h
🇵🇭202.69.171.60	63	9	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	6 h
🇵🇭202.69.169.162	60	8	DNS Poisoning Web Spam Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	9 h
🇵🇭27.49.10.33	59	6	DNS Poisoning FTP Brute-Force Web Spam Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	2 h
🇵🇭210.4.123.4	57	8	DNS Poisoning FTP Brute-Force Phishing Open Proxy Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse HTTP Flood Fake Accounts Telnet Abuse	6 h
🇵🇭139.135.153.61	46	4	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	6 h
🇵🇭136.158.0.113	46	4	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	6 h
🇵🇭143.44.132.142	46	5	DNS Poisoning FTP Brute-Force Web Spam Port Scan SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	18 h
🇵🇭161.49.161.52	41	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host Web App Attack SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	9 h
🇵🇭120.29.77.121	40	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	6 h
🇵🇭136.158.8.25	37	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	6 h
🇵🇭136.158.59.28	37	3	DNS Poisoning Web Spam Port Scan SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	6 h
🇵🇭124.158.42.71	33	3	DNS Poisoning FTP Brute-Force SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	3 d
🇵🇭124.158.42.251	33	3	DNS Poisoning FTP Brute-Force SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	3 d
🇵🇭124.158.42.191	33	3	DNS Poisoning FTP Brute-Force SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	3 d
🇵🇭124.158.42.131	33	3	DNS Poisoning FTP Brute-Force SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	3 d
🇵🇭124.158.42.11	33	3	DNS Poisoning FTP Brute-Force SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	3 d
🇵🇭143.44.196.83	32	5	DNS Poisoning Phishing Web Spam Email Spam Port Scan SQL Injection Spoofing Bad Web Bot Exploited Host SSH Mail Server Attack Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	18 h
🇵🇭136.158.49.53	31	2	DNS Poisoning FTP Brute-Force SQL Injection Brute-Force Bad Web Bot Exploited Host SSH Credential Stuffing Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	4 d

What they were reported for

Where they are

🇵🇭 Philippines100

Block them

The blocklist holds every address with a confidence of 75 or more, in nine formats for firewalls, web servers and SIEMs. Download it with a free API key:

curl -s "https://isipsafe.com/api/v1/blocklist?key=$ISIPSAFE_KEY&format=txt"

See the integration guides for nginx, fail2ban, pfSense, MikroTik and more, or the API reference.

Figures cover the last 30 days and are refreshed hourly; last updated 2 minutes ago.