IP Address

37.49.228.56

IPv4 Public
NL NL
AS61254
ESTOXY OU
48 Reports
This IP is on the Blacklist High confidence threat - blocking recommended
7/10 Threat
91% Confidence
48 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Above Average Risk
NL
The Netherlands Location
ESTOXY OU ASN 61254
48 Reports
Honeypot Data Source

Significant Threat

IP 37.49.228.56 identified as significant threat (7/10) from 48 events.

Multiple malicious indicators detected. Confidence level: 91%.

More threatening than 88% of monitored IPs

Threat Categories

Fraud VoIP 30

Technical Details

VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.

Recommended Mitigations

Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.

Behavioral Analysis

Activity Pattern: Sporadic

Irregular burst activity pattern indicates intermittent use of a compromised system.

First Observed 8. November 2026
Last Activity 9. November 2026
Recent (7 days) 48 incidents

Reputable Network

This IP is hosted on a network (ASN 61254) with generally good reputation. The ISP ESTOXY OU maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Implement rate limiting or temporary blocking measures.

Implement adaptive blocking rules.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 7/10 High
High
Activity Frequency 8/10 High
Confidence Score 91% Verified

Confidence History

9. Nov 2026
91% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (30)

Date Categories Source Confidence
New Fraud VoIP Honeypot 75%
New Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
10 of 48 shown

Technical Details

Basic Information

IP Address
37.49.228.56
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
NL NL
ASN
AS61254
ISP
ESTOXY OU

DNS Information

Reverse DNS
None
PTR Record
No
Connection Type
Static

Statistics

Total Reports
48
First Reported
8 Nov 2026
Last Reported
9 Nov 2026, 20:00

Comparative Analysis

How this IP compares to others in our threat intelligence database

88 %

Global Threat Ranking

This IP is more threatening than 88% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 1,341,192 reported IPs worldwide

Threat Level 7/10 avg: 6.0 +
Total Reports 48 avg: 7 ++

Network Comparison

Compared against 40 IPs in ASN 61254

Threat Level 7/10 network avg: 7.3 =
Total Reports 48 network avg: 13 ++

Geographic Comparison

Compared against 21,560 IPs in NL

Threat Level 7/10 country avg: 6.3 =
Total Reports 48 country avg: 27 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

1,222,559 threat incidents tracked globally • Last 24h: 26,752 Logs

FEED

Top Threat Sources

  1. 01
    BR
    Brazil BR
    261,431 21.4%
  2. 02
    US
    United States US
    210,754 17.2%
  3. 03
    IN
    India IN
    103,799 8.5%
  4. 04
    CN
    China CN
    51,684 4.2%
  5. 05
    AR
    Argentina AR
    42,488 3.5%
  6. 06
    SC
    SC SC
    29,469 2.4%
  7. 07
    MX
    Mexico MX
    28,013 2.3%
  8. 08
    RU
    Russia RU
    27,217 2.2%
  9. 09
    DE
    Germany DE
    25,138 2.1%
  10. 10
    CO
    Colombia CO
    24,306 2%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same Autonomous System (AS) network provider.

20 Related IPs
8.1/10 Avg Threat
41% Avg Confidence
18 High Threat
High-risk network: Majority of related IPs are flagged
37.49.228.70 8/10
Confidence 91%
Reports 21
Location NL NL
5 Nov 2026
37.49.226.234 7/10
Confidence 78%
Reports 11
Location NL NL
30 Oct 2026
37.49.227.148 7/10
Confidence 73%
Reports 123
Location NL NL
17 Oct 2026
37.49.228.84 7/10
Confidence 65%
Reports 29
Location NL NL
15 Oct 2026
37.49.227.165 7/10
Confidence 57%
Reports 11
Location NL NL
14 Oct 2026
37.49.228.162 7/10
Confidence 40%
Reports 3
Location NL NL
5 Nov 2026
205.237.104.18 10/10
Confidence 39%
Reports 77
Location FR FR
30 Sep 2026
205.237.106.81 10/10
Confidence 39%
Reports 68
Location FR FR
30 Sep 2026
205.237.104.121 10/10
Confidence 38%
Reports 23
Location FR FR
29 Sep 2026
205.237.105.190 10/10
Confidence 34%
Reports 12
Location FR FR
28 Sep 2026
77.247.111.101 8/10
Confidence 32%
Reports 4
Location EE EE
11 Oct 2026
37.49.227.66 7/10
Confidence 30%
Reports 3
Location NL NL
20 Oct 2026
37.49.227.189 7/10
Confidence 29%
Reports 3
Location NL NL
18 Oct 2026
37.49.226.61 6/10
Confidence 25%
Reports 1
Location NL NL
3 Nov 2026
37.49.225.20 10/10
Confidence 24%
Reports 13
Location NL NL
30 Aug 2026
205.237.107.65 10/10
Confidence 24%
Reports 13
Location FR FR
17 Aug 2026
205.237.105.132 10/10
Confidence 24%
Reports 11
Location FR FR
16 Aug 2026
37.49.227.149 6/10
Confidence 24%
Reports 2
Location NL NL
11 Sep 2026
205.237.106.126 7/10
Confidence 24%
Reports 1
Location FR FR
22 Sep 2026
185.241.206.44 8/10
Confidence 24%
Reports 1
Location NL NL
13 Sep 2026

IPs from the same subnet range, likely same network segment.

6 Related IPs
6.7/10 Avg Threat
38% Avg Confidence
5 High Threat
High-risk network: Majority of related IPs are flagged
37.49.228.70 8/10
Confidence 91%
Reports 21
Location NL NL
5 Nov 2026
37.49.228.84 7/10
Confidence 65%
Reports 29
Location NL NL
15 Oct 2026
37.49.228.162 7/10
Confidence 40%
Reports 3
Location NL NL
5 Nov 2026
37.49.228.130 4/10
Confidence 23%
Reports 1
Location NL NL
6 Nov 2026
37.49.228.85 7/10
Confidence 9%
Reports 5
Location EE EE
7 Nov 2025
37.49.228.67 7/10
Confidence 0%
Reports 1
Location NL NL
14 Mar 2026

IPs from the same country with similar threat profiles.

15 Related IPs
8.7/10 Avg Threat
99% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
94.154.43.223 8/10
Confidence 100%
Reports 134
ISP Storm Industrie...
28 Oct 2026
94.154.43.63 8/10
Confidence 100%
Reports 107
ISP Storm Industrie...
28 Oct 2026
35.204.39.201 10/10
Confidence 100%
Reports 100
ISP Google LLC
1 Nov 2026
87.192.41.180 8/10
Confidence 100%
Reports 36
ISP Fontaine, LLC
10 Nov 2026
35.204.77.198 10/10
Confidence 100%
Reports 29
ISP Google LLC
6 Nov 2026
45.153.34.178 8/10
Confidence 100%
Reports 26
ISP TechTies Inc.
10 Nov 2026
5.2.69.85 8/10
Confidence 100%
Reports 16
ISP The Infrastruct...
10 Nov 2026
35.204.239.58 8/10
Confidence 100%
Reports 16
ISP Google LLC
1 Nov 2026
203.159.90.15 8/10
Confidence 99%
Reports 18
ISP 1337 Services GmbH
9 Nov 2026
5.2.69.82 8/10
Confidence 99%
Reports 17
ISP The Infrastruct...
8 Nov 2026
35.204.168.209 8/10
Confidence 98%
Reports 39
ISP Google LLC
6 Nov 2026
217.60.76.167 10/10
Confidence 98%
Reports 38
ISP Iryna Ivanenko
10 Nov 2026
34.158.160.203 10/10
Confidence 98%
Reports 18
ISP Google LLC
3 Nov 2026
46.151.178.15 8/10
Confidence 98%
Reports 17
ISP Sino Worldwide ...
29 Oct 2026
34.6.90.70 10/10
Confidence 98%
Reports 16
ISP Google LLC
4 Nov 2026

IPs with similar threat level and confidence scores.

15 Related IPs
10/10 Avg Threat
91% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
35.245.169.3 10/10
Confidence 91%
Reports 12
Location US US
6 Nov 2026
123.129.205.22 10/10
Confidence 91%
Reports 12
Location CN CN
10 Nov 2026
43.242.97.26 10/10
Confidence 91%
Reports 12
Location CN CN
10 Nov 2026
175.153.221.109 10/10
Confidence 91%
Reports 12
Location CN CN
10 Nov 2026
34.80.233.10 10/10
Confidence 91%
Reports 12
Location TW TW
4 Nov 2026
82.197.193.190 10/10
Confidence 91%
Reports 9
Location BE BE
30 Oct 2026
185.132.187.101 10/10
Confidence 91%
Reports 11
Location BE BE
31 Oct 2026
82.197.193.199 10/10
Confidence 91%
Reports 11
Location BE BE
31 Oct 2026
82.197.193.98 10/10
Confidence 91%
Reports 11
Location BE BE
31 Oct 2026
50.6.207.146 10/10
Confidence 91%
Reports 16
Location US US
4 Nov 2026
72.92.127.178 10/10
Confidence 91%
Reports 27
Location US US
26 Oct 2026
96.61.93.124 10/10
Confidence 91%
Reports 27
Location US US
26 Oct 2026
129.121.143.33 10/10
Confidence 91%
Reports 14
Location US US
9 Nov 2026
5.231.223.27 10/10
Confidence 91%
Reports 159
Location DE DE
26 Oct 2026
43.173.26.82 10/10
Confidence 91%
Reports 68
Location ID ID
25 Oct 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "37.49.228.56",
    "threat_level": 7,
    "confidence_score": 91,
    "total_reports": 48,
    "country_code": "NL",
    "isp_name": "ESTOXY OU",
    "asn": "61254",
    "first_reported": "2026-11-08 13:53:05",
    "last_reported": "2026-11-09 20:00:23",
    "exported_at": "2026-11-10T20:21:05+01:00",
    "source": "https://reportedip.com/ip/37.49.228.56/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses