Elevated Risk
Elevated threat level 8/10 for IP 43.228.166.225 from 25 reported incidents.
Behavioral profile indicates cyber threat activity with 62% confidence.
More threatening than 89% of monitored IPs
IP Address
43.228.166.225
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
India
Location
FAB FIVE NETWORK PRIVATE ...
ASN 151690
25
Reports
Mixed
Data Source
Threat Categories
Brute-Force
12
WP Login Brute Force
11
Port Scan
2
Hacking
2
WP XML-RPC Brute Force
2
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
21. September 2026
Last Activity
21. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 151690, operated by FAB FIVE NETWORK PRIVATE LIMITED) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
62%
High Confidence
Confidence History
5. Jun 2026 - 21. Sep 2026
62%
Current
Stable
Trend
Security Reports (25)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 43.228.166.225
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS151690
- ISP
- FAB FIVE NETWORK PRIVATE LIMITED
DNS Information
- Reverse DNS
- 225.166.228.43.in-addr.arpa
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 25
- First Reported
- 5 Jun 2026
- Last Reported
- 21 Sep 2026, 16:38
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS151690
FAB FIVE NETWORK PRIVATE LIMITED
IN
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
9
Total IPs Monitored
95
Total Reports
10.6
Reports per IP
Network Context
This IP address belongs to FAB FIVE NETWORK PRIVATE LIMITED (AS151690), which manages 9 IP addresses in our monitoring system. Out of these, 95 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 831,747 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
25
avg: 9
++
Network Comparison
Compared against 57 IPs in ASN 151690
Threat Level
8/10
network avg: 7.3
=
Total Reports
25
network avg: 8
++
Network FAB FIVE NETWORK PRIVATE LIMITED has overall threat level 4/10
Geographic Comparison
Compared against 87,065 IPs in IN
Threat Level
8/10
country avg: 6.6
+
Total Reports
25
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
21 Sep 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Sunday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
12
WP Login Brute Force
11
Port Scan
2
Hacking
2
WP XML-RPC Brute Force
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
756,123 threat incidents tracked globally • Last 24h: 28,952 Logs
FEED
Top Threat Sources
-
01
United States147,910 19.6% -
02
Brazil111,783 14.8%
-
03
India87,068 11.5%
-
04
China46,034 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,333 2.4%
-
07
Netherlands17,955 2.4%
-
08
Pakistan17,776 2.4%
-
09
Argentina16,264 2.2%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.9/10
Avg Threat
47%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
103.162.74.187
8/10
Confidence
84%
Reports
11
Location
IN
IN
43.228.166.226
8/10
Confidence
82%
Reports
34
Location
IN
IN
43.228.166.227
8/10
Confidence
79%
Reports
29
Location
IN
IN
103.162.74.184
8/10
Confidence
78%
Reports
15
Location
IN
IN
43.228.166.224
7/10
Confidence
65%
Reports
17
Location
IN
IN
103.162.74.186
8/10
Confidence
62%
Reports
12
Location
IN
IN
103.172.56.210
8/10
Confidence
60%
Reports
14
Location
IN
IN
43.228.166.210
8/10
Confidence
48%
Reports
8
Location
IN
IN
103.109.221.54
8/10
Confidence
47%
Reports
15
Location
IN
IN
43.228.166.211
8/10
Confidence
41%
Reports
5
Location
IN
IN
103.162.74.185
8/10
Confidence
37%
Reports
9
Location
IN
IN
103.162.74.136
10/10
Confidence
37%
Reports
3
Location
IN
IN
103.172.56.106
8/10
Confidence
33%
Reports
8
Location
IN
IN
103.172.56.212
10/10
Confidence
30%
Reports
90
Location
IN
IN
103.172.56.107
8/10
Confidence
30%
Reports
9
Location
IN
IN
103.162.75.162
10/10
Confidence
29%
Reports
8
Location
IN
IN
160.191.125.246
7/10
Confidence
28%
Reports
1
Location
IN
IN
103.147.93.146
7/10
Confidence
27%
Reports
3
Location
IN
IN
103.109.221.10
4/10
Confidence
23%
Reports
2
Location
IN
IN
165.99.142.140
6/10
Confidence
23%
Reports
1
Location
IN
IN
IPs from the same subnet range, likely same network segment.
8
Related IPs
7.4/10
Avg Threat
47%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
43.228.166.226
8/10
Confidence
82%
Reports
34
Location
IN
IN
43.228.166.227
8/10
Confidence
79%
Reports
29
Location
IN
IN
43.228.166.224
7/10
Confidence
65%
Reports
17
Location
IN
IN
43.228.166.210
8/10
Confidence
48%
Reports
8
Location
IN
IN
43.228.166.211
8/10
Confidence
41%
Reports
5
Location
IN
IN
43.228.166.154
6/10
Confidence
22%
Reports
1
Location
IN
IN
43.228.166.209
7/10
Confidence
18%
Reports
2
Location
IN
IN
43.228.166.208
7/10
Confidence
17%
Reports
2
Location
IN
IN
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
160.187.54.114
10/10
Confidence
100%
Reports
139
ISP
Imegh Private L...
69.57.172.119
8/10
Confidence
100%
Reports
73
ISP
WHG Hosting Ser...
103.47.15.110
10/10
Confidence
100%
Reports
62
ISP
Precious netcom...
103.130.90.169
10/10
Confidence
100%
Reports
51
ISP
Skylink Fiberne...
103.170.157.62
10/10
Confidence
100%
Reports
49
ISP
Airline Interne...
139.59.83.112
10/10
Confidence
100%
Reports
35
ISP
DigitalOcean, LLC
202.176.1.225
10/10
Confidence
100%
Reports
32
ISP
RailTel Corpora...
103.192.199.245
10/10
Confidence
100%
Reports
30
ISP
NEEVAI SUPERCLO...
121.242.232.147
10/10
Confidence
100%
Reports
28
ISP
TATA Communicat...
183.82.103.178
8/10
Confidence
100%
Reports
27
ISP
Atria Convergen...
14.96.50.90
8/10
Confidence
100%
Reports
24
ISP
Tata Teleservic...
106.51.93.11
8/10
Confidence
100%
Reports
24
ISP
Atria Convergen...
182.70.255.242
10/10
Confidence
100%
Reports
24
ISP
Bharti Airtel L...
103.58.64.209
10/10
Confidence
100%
Reports
23
ISP
INFONET COMM EN...
122.168.197.138
10/10
Confidence
100%
Reports
22
ISP
Bharti Airtel L...
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
62%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
202.21.44.159
10/10
Confidence
62%
Reports
4
Location
IN
IN
182.184.116.119
8/10
Confidence
62%
Reports
13
Location
PK
PK
45.64.84.162
10/10
Confidence
62%
Reports
4
Location
IN
IN
45.198.224.231
10/10
Confidence
62%
Reports
5
Location
US
US
45.132.176.190
10/10
Confidence
62%
Reports
5
Location
RU
RU
8.216.5.102
10/10
Confidence
62%
Reports
13
Location
JP
JP
187.127.175.157
10/10
Confidence
62%
Reports
5
Location
IN
IN
40.124.178.24
7/10
Confidence
62%
Reports
7
Location
US
US
177.223.174.220
10/10
Confidence
62%
Reports
4
Location
BR
BR
2a0c:5a86:f611:f100:406f:3d39:9dac:6e69
10/10
Confidence
62%
Reports
4
Location
ES
ES
45.8.19.72
8/10
Confidence
62%
Reports
12
Location
US
US
213.166.84.53
8/10
Confidence
62%
Reports
5
Location
GB
GB
117.252.149.227
10/10
Confidence
62%
Reports
4
Location
IN
IN
138.3.211.255
7/10
Confidence
62%
Reports
42
Location
JP
JP
2401:4900:1c3d:7867:c834:a2c0:87f5:b22a
10/10
Confidence
62%
Reports
4
Location
IN
IN