JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 39.48.176.236

39.48.176.236 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 32%: ?

32%

ISP	Pakistan Telecommuication company limited
Usage Type	Fixed Line ISP
ASN	AS17557
Domain Name	ptcl.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 39.48.176.236

Whois 39.48.176.236

IP Abuse Reports for 39.48.176.236:

This IP address has been reported a total of 8 times from 5 distinct sources. 39.48.176.236 was first reported on June 18th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-06-18 22:32:13 (6 days ago)		Brute-Force Web App Attack
🇩🇪 konseptit	2026-06-18 12:22:07 (6 days ago)	(wordpress) Failed wordpress login from 39.48.176.236 (PK/Pakistan/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-18 11:08:46 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 39.48.176.236 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.48.176.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 07:08:41.120383 2026] [security2:error] [pid 14763:tid 14763] [client 39.48.176.236:22930] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.48.176.236 (+1 hits since last alert)\|bigholegolf.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bigholegolf.com"] [uri "/xmlrpc.php"] [unique_id "ajPRuQBm50_W1_qPPQQnUQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pscriptos	2026-06-18 09:48:49 (1 week ago)	{"ClientAddr":"39.48.176.236:60860","ClientHost":"39.48.176.236","ClientPort":"60860","ClientUsernam ... show more {"ClientAddr":"39.48.176.236:60860","ClientHost":"39.48.176.236","ClientPort":"60860","ClientUsername":"-","DownstreamContentSize":418,"DownstreamStatus":403,"Duration":168205590,"OriginContentSize":418,"OriginDuration":163887815,"OriginStatus":403,"Overhead":4317775,"RequestAddr":"www.cleveradmin.de","RequestContentSize":705,"RequestCount":557797,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-18T11:48:28.062132034+02:00","StartUTC":"2026-06-18T09:48:28.062132034Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-18T11:48:28+02:00"} {"ClientAddr":"39.48.176.236:60860","ClientHost":"39.48.176.236","C ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 08:38:47 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.48.176.236 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.48.176.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 04:38:41.895098 2026] [security2:error] [pid 14374:tid 14374] [client 39.48.176.236:12595] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.48.176.236 (+1 hits since last alert)\|talentstar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "talentstar.com"] [uri "/xmlrpc.php"] [unique_id "ajOukYubt6Obdq9QQQhOvQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 06:16:55 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.48.176.236 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.48.176.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 02:16:50.031314 2026] [security2:error] [pid 5810:tid 5810] [client 39.48.176.236:20529] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.48.176.236 (+1 hits since last alert)\|answeringilliana.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "answeringilliana.com"] [uri "/xmlrpc.php"] [unique_id "ajONUoYMfhrt-s1jhfxHpwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 05:15:09 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 39.48.176.236 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 39.48.176.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 01:15:05.211313 2026] [security2:error] [pid 2110:tid 2110] [client 39.48.176.236:63026] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 39.48.176.236 (+1 hits since last alert)\|schlegelcreative.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "schlegelcreative.com"] [uri "/xmlrpc.php"] [unique_id "ajN-2bC3jPXAGoZXK3yt1AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-18 05:13:36 (1 week ago)	(wordpress) Failed wordpress login from 39.48.176.236 (PK/Pakistan/-)	Brute-Force

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 155.103.69.40

🇸🇬 103.187.146.169

🇰🇿 2.135.146.53

🇺🇸 209.38.75.14

🇺🇸 185.191.171.19

🇮🇳 122.170.198.169

🇱🇻 81.30.98.158

🇮🇷 80.191.103.21

🇺🇸 66.132.172.148

🇺🇸 47.233.105.47

🇨🇦 24.66.44.92

🇦🇷 186.148.224.219

🇳🇱 176.65.139.46

🇫🇷 162.158.23.215

🇺🇸 98.27.16.131

🇩🇪 47.254.169.202

🇺🇸 216.25.89.156

🇳🇬 197.211.52.66

🇺🇸 172.253.192.155

🇩🇪 147.90.209.5