Skip to main content Skip to footer

IP Address

156.38.41.148

IPv4 Public

LY

AS328200

Al Madar Al Jadeed Joint Stock Company

1 Reports

Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Libya Location

Al Madar Al Jadeed Joint ... ASN 328200

1 Reports

Honeypot Data Source

Elevated Risk

Elevated threat level 7/10 for IP 156.38.41.148 from 1 reported incidents.

Behavioral profile indicates cyber threat activity with 30% confidence.

More threatening than 83% of monitored IPs

Threat Categories

Brute-Force 1

Web App Attack 1

Technical Details

Brute-force attacks systematically attempt password combinations against authentication systems.

Recommended Mitigations

Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over less than a day indicates persistent threat actor operations.

First Observed 7. October 2026

Last Activity 7. October 2026

Recent (7 days) 1 incidents

Reputable Network

This IP is hosted on a network (ASN 328200) with generally good reputation. The ISP Al Madar Al Jadeed Joint Stock Company maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Enhanced monitoring recommended. Review logs for interactions with this IP.

Long-term blocking recommended.

Reputation Summary

Threat Level 7/10 High

High

Activity Frequency 2/10 Very Low

Confidence Score 30% Medium Confidence

Date	Categories	Source	Confidence
7. Oct 2026 New	Brute-Force Web App Attack	Honeypot	75%

Basic Information

IP Address: 156.38.41.148
IP Version: IPv4
Network Type: Public
Tor Network: No
Network Class: Class B

Geolocation

Country: LY
ASN: AS328200
ISP: Al Madar Al Jadeed Joint Stock Company

DNS Information

Reverse DNS: None
PTR Record: No
Connection Type: Static

Statistics

Total Reports: 1
First Reported: 7 Oct 2026
Last Reported: 7 Oct 2026, 11:08

Comparative Analysis

How this IP compares to others in our threat intelligence database

83 %

Global Threat Ranking

This IP is more threatening than 83% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 832,391 reported IPs worldwide

Threat Level 7/10 avg: 6.3 =

Total Reports 1 avg: 9 --

Network Comparison

Compared against 48 IPs in ASN 328200

Threat Level 7/10 network avg: 6.4 =

Total Reports 1 network avg: 1 -

Geographic Comparison

Compared against 258 IPs in LY

Threat Level 7/10 country avg: 5.9 +

Total Reports 1 country avg: 2 --

Daily report activity over the last 30 days showing patterns and peaks.

Peak Day 7 Oct 2026 1 reports

Daily Average 0 reports/day

Most Active Wednesday 1 reports

Evolution of threat level over time based on reported categories and frequency.

Initial Threat 6/10

Current Threat 6/10

Distribution of threat categories reported over time.

Top Threat Categories

Brute-Force 1

Web App Attack 1

Activity patterns showing when this IP is most active during the day and week.

Hourly Activity

Peak activity at 11:00 with 1 reports

Weekly Activity

Geographic Threat Distribution

756,711 threat incidents tracked globally • Last 24h: 29,326 Logs

FEED

Top Threat Sources

01

United States US

148,093 19.6%
02

Brazil BR

111,821 14.8%
03

India IN

87,156 11.5%
04

China CN

46,051 6.1%
05

SC SC

29,252 3.9%
06

Germany DE

18,360 2.4%
07

Netherlands NL

17,975 2.4%
08

Pakistan PK

17,801 2.4%
09

Argentina AR

16,265 2.1%
10

Colombia CO

15,169 2%

+40 more countries

THREAT LEVEL

LOW MED HIGH

IPs from the same Autonomous System (AS) network provider.

20 Related IPs

7.3/10 Avg Threat

31% Avg Confidence

14 High Threat

High-risk network: Majority of related IPs are flagged

IPs from the same subnet range, likely same network segment.

9 Related IPs

6.2/10 Avg Threat

21% Avg Confidence

4 High Threat

Elevated risk: Multiple related IPs are flagged

IPs from the same country with similar threat profiles.

15 Related IPs

8.4/10 Avg Threat

47% Avg Confidence

15 High Threat

High-risk network: Majority of related IPs are flagged

ISP General Post an...

ISP ICONA for IT an...

ISP Aljeel Aljadeed...

ISP Libyan Spider f...

ISP Al Madar Al Jad...

ISP Al Madar Al Jad...

ISP Aljeel Aljadeed...

ISP Al Madar Al Jad...

ISP Al Madar Al Jad...

ISP Giga for Teleco...

ISP Aljeel Aljadeed...

ISP Aljeel Aljadeed...

ISP Aljeel Aljadeed...

ISP Aljeel Aljadeed...

ISP Al Madar Al Jad...

IPs with similar threat level and confidence scores.

15 Related IPs

7.1/10 Avg Threat

30% Avg Confidence

15 High Threat

High-risk network: Majority of related IPs are flagged

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "156.38.41.148",
    "threat_level": 7,
    "confidence_score": 30,
    "total_reports": 1,
    "country_code": "LY",
    "isp_name": "Al Madar Al Jadeed Joint Stock Company",
    "asn": "328200",
    "first_reported": "2026-10-07 11:10:07",
    "last_reported": "2026-10-07 11:08:34",
    "exported_at": "2026-10-07T19:52:17+02:00",
    "source": "https://reportedip.com/ip/156.38.41.148/"
}

Firewall Rules

Ready-to-use blocking rules for common firewall systems.

iptables / netfilter

iptables -A INPUT -s 156.38.41.148 -j DROP
iptables -A OUTPUT -d 156.38.41.148 -j DROP

UFW (Ubuntu)

ufw deny from 156.38.41.148
ufw deny to 156.38.41.148

Windows Firewall

netsh advfirewall firewall add rule name="Block 156.38.41.148" dir=in action=block remoteip=156.38.41.148
netsh advfirewall firewall add rule name="Block 156.38.41.148 Out" dir=out action=block remoteip=156.38.41.148

Cloudflare

# Cloudflare Firewall Rule (IP Access Rules)
# Action: Block
# IP Address: 156.38.41.148

nginx

# Add to server block or location
deny 156.38.41.148;

Apache .htaccess

# Add to .htaccess or Apache config
<RequireAll>
    Require all granted
    Require not ip 156.38.41.148
</RequireAll>

Analyzed high-risk IP addresses