Critical Alert
Security alert: 181.49.8.57 rated 10/10 based on 27 verified incidents.
Threat profile indicates sustained malicious activity with 96% confidence rating.
More threatening than 99% of monitored IPs
IP Address
181.49.8.57
IPv4
Public
CO
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
CO
Location
Telmex Colombia S.A.
ASN 14080
27
Reports
Honeypot
Data Source
Threat Categories
SSH
24
Hacking
7
Exploited Host
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
13. May 2026
Last Activity
13. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 14080) with generally good reputation. The ISP Telmex Colombia S.A. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
3/10
Low
Confidence Score
79%
Verified
Confidence History
22. Feb 2026 - 13. May 2026
96%
Current
Stable
Trend
Security Reports (27)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 181.49.8.57
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
CO
- ASN
- AS14080
- ISP
- Telmex Colombia S.A.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 27
- First Reported
- 22 Feb 2026
- Last Reported
- 13 May 2026, 16:14
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14080
Telmex Colombia S.A.
CO
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
47
Total IPs Monitored
2,886
Total Reports
61.4
Reports per IP
Network Context
This IP address belongs to Telmex Colombia S.A. (AS14080), which manages 47 IP addresses in our monitoring system. Out of these, 2,886 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,493 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
27
avg: 23
+
Network Comparison
Compared against 56 IPs in ASN 14080
Threat Level
10/10
network avg: 7.3
+
Total Reports
27
network avg: 52
-
Network Telmex Colombia S.A. has overall threat level 3/10
Geographic Comparison
Compared against 442 IPs in CO
Threat Level
10/10
country avg: 5.6
++
Total Reports
27
country avg: 20
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
13 May 2026
6 reports
Daily Average
0.2
reports/day
Most Active
Wednesday
11 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
24
Hacking
7
Exploited Host
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 15:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
72%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
186.80.18.158
8/10
Confidence
99%
Reports
94
Location
CO
CO
190.85.41.170
10/10
Confidence
97%
Reports
33
Location
CO
CO
186.146.235.58
10/10
Confidence
97%
Reports
27
Location
CO
CO
200.118.150.20
10/10
Confidence
84%
Reports
75
Location
CO
CO
190.145.192.106
8/10
Confidence
83%
Reports
14
Location
CO
CO
200.14.238.173
10/10
Confidence
82%
Reports
19
Location
CO
CO
190.144.36.59
10/10
Confidence
76%
Reports
33
Location
CO
CO
181.48.79.202
8/10
Confidence
76%
Reports
25
Location
CO
CO
181.49.117.132
10/10
Confidence
75%
Reports
30
Location
CO
CO
181.48.104.130
10/10
Confidence
74%
Reports
9
Location
CO
CO
181.49.203.206
10/10
Confidence
72%
Reports
13
Location
CO
CO
181.48.91.126
8/10
Confidence
67%
Reports
8
Location
CO
CO
181.48.116.118
10/10
Confidence
64%
Reports
41
Location
CO
CO
181.57.161.84
10/10
Confidence
63%
Reports
14
Location
CO
CO
181.49.161.173
10/10
Confidence
60%
Reports
1,692
Location
CO
CO
190.144.37.68
10/10
Confidence
59%
Reports
623
Location
CO
CO
190.145.43.226
10/10
Confidence
56%
Reports
8
Location
CO
CO
181.49.176.40
0/10
Confidence
51%
Reports
4
Location
CO
CO
181.48.194.185
10/10
Confidence
50%
Reports
9
Location
CO
CO
181.57.198.116
10/10
Confidence
49%
Reports
15
Location
CO
CO
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
186.31.95.163
10/10
Confidence
100%
Reports
88
ISP
Colombia
186.80.18.158
8/10
Confidence
99%
Reports
94
ISP
Telmex Colombia...
191.97.12.90
10/10
Confidence
99%
Reports
32
ISP
TV AZTECA SUCUR...
45.65.233.18
10/10
Confidence
99%
Reports
29
ISP
COLOMBIA MAS TV...
186.118.142.245
10/10
Confidence
99%
Reports
20
ISP
COLOMBIA TELECO...
179.33.186.150
10/10
Confidence
98%
Reports
106
ISP
COLOMBIA TELECO...
69.6.234.27
10/10
Confidence
98%
Reports
17
ISP
Oracle Corporation
190.5.200.98
10/10
Confidence
98%
Reports
16
ISP
EMTEL S.A. E.S.P.
152.200.205.180
10/10
Confidence
98%
Reports
15
ISP
COLOMBIA TELECO...
190.85.41.170
10/10
Confidence
97%
Reports
33
ISP
Telmex Colombia...
186.146.235.58
10/10
Confidence
97%
Reports
27
ISP
Telmex Colombia...
190.242.109.42
10/10
Confidence
97%
Reports
26
ISP
LIBERTY NETWORK...
186.30.115.187
10/10
Confidence
96%
Reports
70
ISP
Colombia
190.65.59.53
10/10
Confidence
95%
Reports
11
ISP
COLOMBIA TELECO...
190.69.34.61
10/10
Confidence
94%
Reports
32
ISP
COLOMBIA TELECO...
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
16.58.56.214
8/10
Confidence
96%
Reports
2,336
Location
US
US
18.116.101.220
8/10
Confidence
96%
Reports
2,170
Location
US
US
18.218.118.203
8/10
Confidence
96%
Reports
1,949
Location
US
US
45.148.10.183
10/10
Confidence
96%
Reports
1,929
Location
NL
NL
3.129.187.38
8/10
Confidence
96%
Reports
1,861
Location
US
US
3.130.168.2
8/10
Confidence
96%
Reports
1,647
Location
US
US
3.131.220.121
8/10
Confidence
96%
Reports
1,306
Location
US
US
3.132.26.232
8/10
Confidence
96%
Reports
939
Location
US
US
185.91.127.85
10/10
Confidence
96%
Reports
921
Location
DE
DE
193.142.146.230
8/10
Confidence
96%
Reports
818
Location
DE
DE
3.134.216.108
8/10
Confidence
96%
Reports
740
Location
US
US
78.153.140.177
10/10
Confidence
96%
Reports
686
Location
GB
GB
106.75.184.142
10/10
Confidence
96%
Reports
677
Location
CN
CN
106.75.156.189
10/10
Confidence
96%
Reports
670
Location
CN
CN
106.75.157.47
10/10
Confidence
96%
Reports
661
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203