Check an IP Address, Domain Name, Subnet, or ASN

39.51.36.247 was found in our database!

$ whois 39.51.36.247

country·🇵🇰 Pakistan

city·Karachi

isp·Pakistan Telecommunication Company Limited

asn·AS17557

network·Standard

$ sikker risk 39.51.36.247scoring →

confidence

72%High

first_seen·Mar 27, 2026

last_seen·3h ago

sessions·4

events·4

$ sikker protocols 39.51.36.247

SMB

4 / 4

$ sikker summary 39.51.36.247

39.51.36.247 has a threat confidence score of 72%. This IP address from Pakistan (AS17557, Pakistan Telecommunication Company Limited) has been observed in 4 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 27, 2026, most recently active March 27, 2026.

$ sikker behaviors 39.51.36.247catalog →

highRemcom Remote Execution2x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 39.51.36.247

smb_empty_rpc_call2 smb_ipc_share_access2 smb_remcom_pipe_open2 smb_svcctl_pipe_open2

$ sikker related 39.51.36.247

🇵🇰·More threats fromPakistan→AS·More threats fromPakistan Telecommunication Company Limited→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
182.185.183.213	64%	2
39.61.48.86	100%	24
182.187.137.41	100%	42
182.187.136.40	67%	3
182.180.57.212	100%	364

IP Address	Confidence	Events
223.123.43.7	100%	23,490
163.61.227.147	100%	38
103.173.7.174	100%	27
36.255.40.60	100%	17
182.185.183.213	64%	2