Extreme Threat
IP 49.228.134.109 classified at threat level 10/10 with 20 documented attacks.
Advanced threat indicators confirmed with 63% certainty.
More threatening than 91% of monitored IPs
IP Address
49.228.134.109
IPv4
Public
TH
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
TH
Location
AIS Fibre
ASN 133481
20
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
20
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Reputable Network
This IP is hosted on a network (ASN 133481) with generally good reputation. The ISP AIS Fibre maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
61%
High Confidence
Confidence History
29. Jan 2026
63%
Current
Stable
Trend
Security Reports (20)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Exploited Host | Honeypot x77 | 75% | |
| Exploited Host | Honeypot x355 | 75% | |
| Exploited Host | Honeypot x285 | 75% | |
| Exploited Host | Honeypot x239 | 75% | |
| Exploited Host | Honeypot x56 | 75% | |
| Exploited Host | Honeypot x187 | 75% | |
| Exploited Host | Honeypot x181 | 75% | |
| Exploited Host | Honeypot x140 | 75% | |
| Exploited Host | Honeypot x282 | 75% | |
| Exploited Host | Honeypot x397 | 75% | |
| Exploited Host | Honeypot x118 | 75% | |
| Exploited Host | Honeypot x179 | 75% | |
| Exploited Host | Honeypot x87 | 75% | |
| Exploited Host | Honeypot x121 | 75% | |
| Exploited Host | Honeypot x170 | 75% | |
| Exploited Host | Honeypot x91 | 75% | |
| Exploited Host | Honeypot x115 | 75% | |
| Exploited Host | Honeypot x44 | 75% | |
| Exploited Host | Honeypot x3 | 75% | |
| Exploited Host | Honeypot x22 | 75% |
Technical Details
Basic Information
- IP Address
- 49.228.134.109
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
TH
- ASN
- AS133481
- ISP
- AIS Fibre
DNS Information
- Reverse DNS
- 49-228-134-0.24.erhq.myaisfibre.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 20
- First Reported
- 29 Jan 2026
- Last Reported
- 29 Jan 2026, 17:16
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS133481
AIS Fibre
TH
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
82
Total IPs Monitored
433
Total Reports
5.3
Reports per IP
Network Context
This IP address belongs to AIS Fibre (AS133481), which manages 82 IP addresses in our monitoring system. Out of these, 433 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,575 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
20
avg: 23
=
Network Comparison
Compared against 157 IPs in ASN 133481
Threat Level
10/10
network avg: 4.1
++
Total Reports
20
network avg: 3
++
Network AIS Fibre has overall threat level 1/10
Geographic Comparison
Compared against 1,577 IPs in TH
Threat Level
10/10
country avg: 4.8
++
Total Reports
20
country avg: 14
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Thursday
20 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
20
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 11 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6/10
Avg Threat
52%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
49.0.85.146
10/10
Confidence
100%
Reports
53
Location
TH
TH
58.136.72.173
10/10
Confidence
66%
Reports
16
Location
TH
TH
49.228.43.232
8/10
Confidence
65%
Reports
10
Location
TH
TH
49.228.104.140
8/10
Confidence
59%
Reports
8
Location
TH
TH
49.0.80.15
10/10
Confidence
57%
Reports
7
Location
TH
TH
49.228.30.202
10/10
Confidence
56%
Reports
4
Location
TH
TH
110.49.3.19
0/10
Confidence
56%
Reports
4
Location
TH
TH
184.22.235.169
0/10
Confidence
55%
Reports
4
Location
TH
TH
58.136.220.26
10/10
Confidence
52%
Reports
11
Location
TH
TH
49.228.94.34
10/10
Confidence
51%
Reports
3
Location
TH
TH
184.22.233.105
0/10
Confidence
50%
Reports
3
Location
TH
TH
184.22.233.225
0/10
Confidence
49%
Reports
2
Location
TH
TH
49.0.64.28
10/10
Confidence
48%
Reports
6
Location
TH
TH
2405:9800:b900:681:e40e:f905:60fd:4d7d
8/10
Confidence
42%
Reports
3
Location
TH
TH
49.228.246.3
10/10
Confidence
41%
Reports
5
Location
TH
TH
49.228.97.14
8/10
Confidence
40%
Reports
8
Location
TH
TH
49.228.179.36
0/10
Confidence
40%
Reports
2
Location
TH
TH
49.228.236.162
0/10
Confidence
40%
Reports
2
Location
TH
TH
49.228.43.62
7/10
Confidence
40%
Reports
2
Location
TH
TH
184.22.33.126
0/10
Confidence
40%
Reports
2
Location
TH
TH
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
49.0.85.146
10/10
Confidence
100%
Reports
53
ISP
AIS Fibre
27.254.152.90
8/10
Confidence
99%
Reports
62
ISP
dragonhispeed
118.193.57.185
7/10
Confidence
98%
Reports
87
ISP
UCLOUD INFORMAT...
118.193.57.62
8/10
Confidence
98%
Reports
59
ISP
UCLOUD INFORMAT...
103.27.200.76
10/10
Confidence
98%
Reports
21
ISP
Bangmod Enterpr...
117.121.214.50
10/10
Confidence
98%
Reports
13
ISP
UIH
147.50.231.135
10/10
Confidence
96%
Reports
117
ISP
CS LOXINFO Publ...
118.194.251.144
10/10
Confidence
96%
Reports
78
ISP
UCLOUD INFORMAT...
118.194.251.58
10/10
Confidence
96%
Reports
65
ISP
UCLOUD INFORMAT...
152.32.247.22
10/10
Confidence
96%
Reports
45
ISP
UCLOUD INFORMAT...
118.194.250.113
10/10
Confidence
96%
Reports
31
ISP
UCLOUD INFORMAT...
202.183.141.189
8/10
Confidence
96%
Reports
14
ISP
SBN-ISPAWN-ISP ...
202.29.225.206
10/10
Confidence
96%
Reports
14
ISP
Chulalongkorn U...
165.154.51.225
8/10
Confidence
95%
Reports
86
ISP
UCLOUD INFORMAT...
165.154.51.221
8/10
Confidence
95%
Reports
67
ISP
UCLOUD INFORMAT...
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
63%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
3.130.96.91
8/10
Confidence
63%
Reports
43,462
Location
US
US
3.134.148.59
8/10
Confidence
63%
Reports
14,980
Location
US
US
92.118.39.87
10/10
Confidence
63%
Reports
14,713
Location
US
US
87.120.191.13
10/10
Confidence
63%
Reports
13,131
Location
US
US
3.137.73.221
8/10
Confidence
63%
Reports
10,228
Location
US
US
3.132.23.201
8/10
Confidence
63%
Reports
9,576
Location
US
US
3.149.59.26
8/10
Confidence
63%
Reports
8,795
Location
US
US
167.250.224.25
10/10
Confidence
63%
Reports
8,244
Location
BR
BR
176.117.107.74
10/10
Confidence
63%
Reports
5,739
Location
NL
NL
142.202.188.211
10/10
Confidence
63%
Reports
4,136
Location
US
US
176.117.107.91
10/10
Confidence
63%
Reports
3,994
Location
NL
NL
196.251.70.234
10/10
Confidence
63%
Reports
3,796
Location
SC
SC
45.88.186.70
8/10
Confidence
63%
Reports
3,632
Location
NL
NL
2.57.122.209
10/10
Confidence
63%
Reports
2,573
Location
RO
RO
64.188.91.248
10/10
Confidence
63%
Reports
2,232
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203