Medium Threat
Medium risk rating 5/10 for IP 185.128.138.188 based on 18 incidents.
Suspicious behavior markers present. 87% confidence level.
More threatening than 49% of monitored IPs
IP Address
185.128.138.188
IPv4
Public
IR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Below Average Risk
Iran
Location
Sefroyek Pardaz Engineeri...
ASN 48715
18
Reports
Honeypot
Data Source
Threat Categories
Email Spam
18
Technical Details
Email spam involves mass distribution of unwanted emails, often for advertising, phishing, or malware delivery.
Recommended Mitigations
Implement SPF, DKIM, DMARC, and use reputable email filtering services.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
4. November 2026
Last Activity
14. November 2026
Recent (7 days)
15 incidents
Moderate Network Risk
The network hosting this IP (ASN 48715, operated by Sefroyek Pardaz Engineering PJSC) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Monitor traffic patterns. Review logs periodically for escalation.
Immediate monitoring recommended.
Reputation Summary
Threat Level
5/10
Medium
Medium
Activity Frequency
8/10
High
Confidence Score
87%
Verified
Confidence History
4. Nov 2026 - 14. Nov 2026
87%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Email Spam | Honeypot | 75% |
| New | Email Spam | Honeypot | 75% |
| New | Email Spam | Honeypot | 75% |
| New | Email Spam | Honeypot | 75% |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.128.138.188
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
IR
- ASN
- AS48715
- ISP
- Sefroyek Pardaz Engineering PJSC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 4 Nov 2026
- Last Reported
- 14 Nov 2026, 19:08
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS48715
Sefroyek Pardaz Engineering PJSC
IR
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
5
Total IPs Monitored
9
Total Reports
1.8
Reports per IP
Network Context
This IP address belongs to Sefroyek Pardaz Engineering PJSC (AS48715), which manages 5 IP addresses in our monitoring system. Out of these, 9 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
49
%
Global Threat Ranking
This IP is more threatening than 49% of all IPs in our database.
Below Average ThreatGlobal Comparison
Compared against 1,352,021 reported IPs worldwide
Threat Level
5/10
avg: 6.0
-
Total Reports
18
avg: 7
++
Network Comparison
Compared against 26 IPs in ASN 48715
Threat Level
5/10
network avg: 6.4
-
Total Reports
18
network avg: 10
++
Network Sefroyek Pardaz Engineering PJSC has overall threat level 5/10
Geographic Comparison
Compared against 2,110 IPs in IR
Threat Level
5/10
country avg: 7.1
-
Total Reports
18
country avg: 25
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 Nov 2026
4 reports
Daily Average
0.6
reports/day
Most Active
Wednesday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
3/10
Current Threat
3/10
Distribution of threat categories reported over time.
Top Threat Categories
Email Spam
18
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 19:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,232,307 threat incidents tracked globally • Last 24h: 20,723 Logs
FEED
Top Threat Sources
-
01
Brazil261,719 21.2% -
02
United States213,607 17.3% -
03
India104,158 8.5% -
04
China52,534 4.3% -
05
Argentina42,605 3.5% -
06
SC29,485 2.4% -
07
Mexico28,148 2.3% -
08
Russia27,411 2.2% -
09
Germany25,867 2.1% -
10
Colombia24,359 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.2/10
Avg Threat
35%
Avg Confidence
9
High Threat
Elevated risk: Multiple related IPs are flagged
185.112.150.97
10/10
Confidence
94%
Reports
113
Location
IR
IR
185.112.149.185
5/10
Confidence
87%
Reports
14
Location
IR
IR
185.128.138.184
5/10
Confidence
61%
Reports
8
Location
IR
IR
185.173.129.152
5/10
Confidence
55%
Reports
5
Location
IR
IR
185.128.138.178
5/10
Confidence
51%
Reports
5
Location
IR
IR
185.128.138.185
5/10
Confidence
50%
Reports
6
Location
IR
IR
185.128.138.177
5/10
Confidence
49%
Reports
6
Location
IR
IR
185.128.138.182
5/10
Confidence
34%
Reports
3
Location
IR
IR
195.211.44.226
10/10
Confidence
24%
Reports
4
Location
IR
IR
185.112.150.144
7/10
Confidence
24%
Reports
2
Location
IR
IR
185.206.231.42
6/10
Confidence
24%
Reports
2
Location
IR
IR
185.141.107.80
7/10
Confidence
24%
Reports
1
Location
IR
IR
185.18.213.22
7/10
Confidence
24%
Reports
1
Location
IR
IR
78.110.121.87
0/10
Confidence
23%
Reports
3
Location
IR
IR
185.128.138.180
4/10
Confidence
23%
Reports
1
Location
IR
IR
185.173.129.146
4/10
Confidence
23%
Reports
1
Location
IR
IR
185.18.215.23
10/10
Confidence
14%
Reports
43
Location
IR
IR
185.18.215.110
8/10
Confidence
9%
Reports
5
Location
IR
IR
78.110.121.112
8/10
Confidence
9%
Reports
4
Location
IR
IR
195.211.44.136
8/10
Confidence
6%
Reports
6
Location
IR
IR
IPs from the same subnet range, likely same network segment.
6
Related IPs
4.8/10
Avg Threat
45%
Avg Confidence
185.128.138.184
5/10
Confidence
61%
Reports
8
Location
IR
IR
185.128.138.178
5/10
Confidence
51%
Reports
5
Location
IR
IR
185.128.138.185
5/10
Confidence
50%
Reports
6
Location
IR
IR
185.128.138.177
5/10
Confidence
49%
Reports
6
Location
IR
IR
185.128.138.182
5/10
Confidence
34%
Reports
3
Location
IR
IR
185.128.138.180
4/10
Confidence
23%
Reports
1
Location
IR
IR
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
88%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
130.193.77.236
8/10
Confidence
96%
Reports
127
ISP
Sefroyek Pardaz...
77.90.185.243
8/10
Confidence
96%
Reports
49
ISP
Limited Network...
185.112.150.97
10/10
Confidence
94%
Reports
113
ISP
Sefroyek Pardaz...
85.185.201.10
10/10
Confidence
90%
Reports
24
ISP
Iran Telecommun...
85.133.193.72
10/10
Confidence
89%
Reports
64
ISP
Amir Hosein Maaref
152.89.12.101
10/10
Confidence
87%
Reports
25
ISP
Sharif Universi...
2.189.254.58
10/10
Confidence
87%
Reports
20
ISP
Asre Pardazeshe...
94.182.168.149
10/10
Confidence
87%
Reports
18
ISP
Aria Shatel PJSC
185.112.149.185
5/10
Confidence
87%
Reports
14
ISP
Sefroyek Pardaz...
192.253.248.251
10/10
Confidence
86%
Reports
2,711
ISP
Limited Network...
62.60.130.201
8/10
Confidence
86%
Reports
62
ISP
Cipher Operatio...
77.90.185.226
8/10
Confidence
86%
Reports
45
ISP
Limited Network...
192.253.248.128
8/10
Confidence
86%
Reports
12
ISP
Limited Network...
192.253.248.229
8/10
Confidence
85%
Reports
1,063
ISP
Limited Network...
77.90.185.20
8/10
Confidence
85%
Reports
254
ISP
Limited Network...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
157.245.157.191
10/10
Confidence
87%
Reports
9
Location
SG
SG
35.241.73.97
10/10
Confidence
87%
Reports
8
Location
HK
HK
185.132.187.251
10/10
Confidence
87%
Reports
8
Location
BE
BE
185.132.187.41
10/10
Confidence
87%
Reports
8
Location
BE
BE
20.2.89.114
10/10
Confidence
87%
Reports
12
Location
HK
HK
47.221.73.202
10/10
Confidence
87%
Reports
15
Location
US
US
34.85.99.144
10/10
Confidence
87%
Reports
31
Location
JP
JP
34.39.192.142
10/10
Confidence
87%
Reports
43
Location
BR
BR
129.121.126.32
10/10
Confidence
87%
Reports
13
Location
US
US
152.32.225.199
10/10
Confidence
87%
Reports
13
Location
HK
HK
24.26.1.243
10/10
Confidence
87%
Reports
17
Location
US
US
129.121.140.207
10/10
Confidence
87%
Reports
13
Location
US
US
50.6.207.146
10/10
Confidence
87%
Reports
16
Location
US
US
108.228.91.229
10/10
Confidence
87%
Reports
28
Location
US
US
47.221.75.43
10/10
Confidence
87%
Reports
15
Location
US
US