Substantial Risk
Threat level 8/10 for 49.247.36.95 based on 68 documented incidents.
Consistent suspicious behavior patterns. 0% confidence rating.
More threatening than 85% of monitored IPs
IP Address
49.247.36.95
IPv4
Public
KR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
KR
Location
SMILESERV
ASN 38700
68
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 38700) with generally good reputation. The ISP SMILESERV maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
0%
Unverified
Confidence History
3. Nov 2025 - 4. Nov 2025
0%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 49.247.36.95
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KR
- ASN
- AS38700
- ISP
- SMILESERV
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 68
- First Reported
- 2 Nov 2025
- Last Reported
- 4 Nov 2025, 08:17
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS38700
SMILESERV
KR
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
15
Total IPs Monitored
447
Total Reports
29.8
Reports per IP
Network Context
This IP address belongs to SMILESERV (AS38700), which manages 15 IP addresses in our monitoring system. Out of these, 447 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 806,628 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
68
avg: 9
++
Network Comparison
Compared against 31 IPs in ASN 38700
Threat Level
8/10
network avg: 8.2
=
Total Reports
68
network avg: 21
++
Network SMILESERV has overall threat level 3/10
Geographic Comparison
Compared against 4,617 IPs in KR
Threat Level
8/10
country avg: 7.3
=
Total Reports
68
country avg: 12
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
48 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
68
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
733,509 threat incidents tracked globally • Last 24h: 28,645 Logs
FEED
Top Threat Sources
-
01
United States143,262 19.5% -
02
Brazil110,751 15.1%
-
03
India82,121 11.2%
-
04
China44,763 6.1%
-
05
SC29,233 4%
-
06
Germany17,490 2.4%
-
07
Netherlands17,473 2.4%
-
08
Pakistan16,642 2.3%
-
09
Argentina16,189 2.2%
-
10
Colombia15,134 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.2/10
Avg Threat
31%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
49.247.138.161
10/10
Confidence
100%
Reports
19
Location
KR
KR
49.247.214.126
10/10
Confidence
92%
Reports
18
Location
KR
KR
115.68.208.117
10/10
Confidence
85%
Reports
51
Location
KR
KR
49.247.37.22
10/10
Confidence
69%
Reports
31
Location
KR
KR
49.247.202.239
10/10
Confidence
44%
Reports
10
Location
KR
KR
115.68.226.19
10/10
Confidence
33%
Reports
14
Location
KR
KR
115.68.17.246
6/10
Confidence
29%
Reports
2
Location
KR
KR
115.68.177.11
10/10
Confidence
24%
Reports
11
Location
KR
KR
49.247.215.5
5/10
Confidence
24%
Reports
2
Location
KR
KR
115.68.77.130
4/10
Confidence
23%
Reports
1
Location
KR
KR
115.68.0.23
4/10
Confidence
23%
Reports
1
Location
KR
KR
115.68.219.229
6/10
Confidence
22%
Reports
1
Location
KR
KR
115.68.192.28
7/10
Confidence
16%
Reports
2
Location
KR
KR
49.247.36.49
10/10
Confidence
7%
Reports
23
Location
KR
KR
115.68.226.124
8/10
Confidence
6%
Reports
14
Location
KR
KR
115.68.226.131
10/10
Confidence
4%
Reports
3
Location
KR
KR
49.247.14.246
8/10
Confidence
4%
Reports
3
Location
KR
KR
115.68.207.110
8/10
Confidence
3%
Reports
11
Location
KR
KR
115.68.227.92
10/10
Confidence
2%
Reports
72
Location
KR
KR
49.247.188.64
8/10
Confidence
1%
Reports
38
Location
KR
KR
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
7%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
20.196.195.74
8/10
Confidence
100%
Reports
19
ISP
Microsoft Corpo...
49.247.138.161
10/10
Confidence
100%
Reports
19
ISP
SMILESERV
52.141.4.134
8/10
Confidence
100%
Reports
18
ISP
Microsoft Corpo...
20.214.105.208
8/10
Confidence
100%
Reports
15
ISP
Microsoft Corpo...
118.194.249.186
8/10
Confidence
99%
Reports
46
ISP
UCLOUD INFORMAT...
118.39.219.45
10/10
Confidence
99%
Reports
20
ISP
Korea Telecom
219.250.188.143
10/10
Confidence
99%
Reports
15
ISP
SK Broadband Co...
121.148.71.200
10/10
Confidence
98%
Reports
37
ISP
Korea Telecom
211.220.197.170
10/10
Confidence
98%
Reports
24
ISP
Korea Telecom
1.209.110.147
10/10
Confidence
98%
Reports
13
ISP
LG DACOM Corpor...
14.53.119.248
10/10
Confidence
98%
Reports
12
ISP
Korea Telecom
185.227.152.135
10/10
Confidence
97%
Reports
17
ISP
Cloudie Limited
149.174.58.60
8/10
Confidence
97%
Reports
13
ISP
PACKETHUB S.A.
175.119.225.92
10/10
Confidence
96%
Reports
32
ISP
SK Broadband Co...
61.43.121.132
10/10
Confidence
96%
Reports
20
ISP
LG DACOM Corpor...