49.228.157.34📋 Copy

# IP Intelligence Briefing: 49.228.157.34

Classification: Moderate Risk (Score: 40/100)

Status: Under Investigation

---

## Executive Summary

IP address 49.228.157.34 is a Bangkok, Thailand-based infrastructure endpoint operated by SBN Co Ltd IP Planning under the TH-AIS-Fibre network (ASN 133481). The IP is currently firewalled with no open services and demonstrates consistent geolocation and ownership patterns. While classified as "Moderate Risk," no active threat indicators or malicious behavior have been detected.

---

## Infrastructure Profile

Network Ownership:

• Organization: SBN Co Ltd IP Planning
• Network Name: TH-AIS-Fibre
• ASN: 133481
• CIDR Block: 49.228.144.0/20
• RIR: APNIC (Asia Pacific)

Geolocation:

• Location: Bangkok, Thailand
• Coordinates: 13.7499°N, 100.517°E
• Timezone: Asia/Bangkok
• Distance from Probe: 9,059.8 km
• Average RTT: 299ms (Minimum plausible: 181.2ms)

DNS Resolution:

• PTR Hostname: 49-228-157-0.24.myaisfibre.com
• Domain: myaisfibre.com
• Forward Resolution: Not confirmed

Service Status:

• Open Ports: None detected
• HTTP/HTTPS: Not available
• TLS Certificate: None
• Classification: Firewalled / No Services

---

## Threat Assessment

Risk Indicators:

• Reputation Score: 40 (Moderate Risk)
• Abuse Confidence: Not applicable (No active abuse)
• Blacklist Count: 0
• DNSBL Listings: 2 of 8 total lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Campaign Correlation:

• No known malware campaigns
• No certificate-based correlations
• No banner-grab matches
• Zero correlated malicious IPs

---

## Network Context

Subnet Classification:

• Subnet: 49.228.157.0/24
• Abuse Density: 0%
• Classification: Clean
• Active Siblings: 0
• Threat Siblings: 0

Control Plane:

• Route Stability: False (but 0 route changes in 30 days)
• MOAS: No
• RPKI State: Not verified
• IRR Consistency: Not verified

---

## Observational History

Recent Activity (20 observations):

• Latest Signal: 2026-07-28 02:22:13 UTC
• Geolocation Consistency: Stable (Bangkok, Thailand)
• Ownership Changes: 0 (persistent ownership)
• Threat Persistence: 0 days
• Classification Stability: "Clean" subnet classification maintained

Signal Types Observed:

• Port scanning activity (no open ports)
• Provider classification verification
• Geolocation validation (RTT consistent with Bangkok)
• Subnet abuse density monitoring
• Ownership stability tracking

---

## Associated Entities

Network Relationships (5):

• TH-AIS-Fibre (repeated 5x)

DNS Associations (6):

• 49-228-157-0.24.myaisfibre.com (repeated 6x)

No external or cross-network relationships identified.

---

## Recommended Actions

Immediate:

• Monitor for service port emergence
• Verify DNS resolution consistency
• Continue geolocation validation

Network Security:

• No immediate blocking recommended
• Standard logging and monitoring advised
• Consider DNSBL monitoring given 2-list presence

Classification:

• Low-priority monitoring
• No active threat indicators present
• Profile consistent with legitimate telecom infrastructure

---

Generated: IPDebrief Intelligence Platform

Data Sources: Profile, History, Relationships, Neighborhood analysis

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.