39.48.195.249

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
35% Elevated
11 reports
8 reporters · latest 1 week ago
ISP
Pakistan Telecommuication company limited
Usage Type
Fixed Line ISP
ASN
AS17557
Domain Name
ptcl.net.pk
Country
🇵🇰 Pakistan
City
Karachi, Sindh
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
11 from 8 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇷🇺 Russian Federation 5 🇻🇳 Viet Nam 2 🇧🇷 Brazil 1
Most common categories Brute-Force 11 Hacking 3 SSH 2 Port Scan 2 Exploited Host 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-29 UTC.
Brute-Force Exploited Host
🇨🇳 leonfetter
Dasheng Security: 1 failed logons in 1440 minutes
Brute-Force
🇷🇺 Sec-Dmn
SSH Brute-Force detected by infrastructure gateway.
Brute-Force SSH
🇫🇷 ✨
Rule : RDP Rule: RDP Event: RDP S-1-0-0 - - 0x0 S-1-0-0 GUEST1 0xc000006d %#13 0xc0000064 3 NtLmSsp NTLM - - - 0 0x0 - 39.48.195.249 0
SSH Brute-Force
🇷🇺 AbuseIPDB informer
rdp_ban_list_v4: 39.48.195.249 | Bruteforce attack on RDP tcp/3389 | proto=tcp | port=3389 | ban timeout=60m | remaining at capture=47m27s430ms | elapsed since block=12m33s
Port Scan Hacking Brute-Force
🇷🇺 AbuseIPDB informer
OpenWrt nftables rdp_ban_list_v4: 39.48.195.249 | Bruteforce attack on RDP tcp/3389 | proto=tcp | port=3389 | ban timeout=60m | remaining at capture=54m19s680ms | elapsed since block=5m40s
Port Scan Hacking Brute-Force
🇷🇺 Dmitriy Erokhin
Brute-Force
🇷🇺 AbuseIPDB informer
RDP port bruteforce
Brute-Force Hacking
🇻🇳 scuslon
RdpGuard detected brute-force attempt on RDP
Brute-Force
🇩🇪 canturan
Brute-force: 100 failed RDP/Windows logon login attempts; address blocked automatically.
Brute-Force
🇻🇳 scuslon
RdpGuard detected brute-force attempt on RDP
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 206.12.19.2
🇧🇷 177.65.136.202
🇺🇸 158.94.187.229
🇮🇷 151.232.82.162
🇺🇸 20.80.92.173
🇩🇪 8.209.68.65
🇦🇺 1.145.101.253
🇰🇷 220.116.117.213
🇨🇱 186.189.72.18
🇨🇴 186.81.100.174
🇮🇶 169.224.15.40
🇺🇸 165.22.191.10
🇺🇸 162.216.150.219
🇸🇬 150.109.16.200
🇫🇮 147.185.133.158
🇭🇰 123.58.219.98
feedback