Check an IP Address, Domain Name, Subnet, or ASN

39.49.0.131 was found in our database!

$ whois 39.49.0.131

country·🇵🇰 Pakistan

city·Lahore

isp·Pakistan Telecommunication Company Limited

asn·AS17557

network·Standard

$ sikker risk 39.49.0.131scoring →

confidence

72%High

first_seen·Mar 24, 2026

last_seen·2h ago

sessions·4

events·4

$ sikker protocols 39.49.0.131

SMB

4 / 4

$ sikker summary 39.49.0.131

39.49.0.131 has a threat confidence score of 72%. This IP address from Pakistan (AS17557, Pakistan Telecommunication Company Limited) has been observed in 4 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 24, 2026, most recently active March 24, 2026.

$ sikker behaviors 39.49.0.131catalog →

highRemcom Remote Execution2x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 39.49.0.131

smb_empty_rpc_call2 smb_ipc_share_access2 smb_remcom_pipe_open2 smb_svcctl_pipe_open2

$ sikker related 39.49.0.131

🇵🇰·More threats fromPakistan→AS·More threats fromPakistan Telecommunication Company Limited→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
182.180.57.72	52%	9
39.45.51.199	35%	3
39.35.219.8	53%	71
182.176.174.110	19%	26
182.191.86.234	97%	66

IP Address	Confidence	Events
223.123.73.10	100%	37
223.123.38.35	100%	21,970
223.123.72.120	99%	6
144.48.130.133	100%	1,192
103.159.24.51	71%	161