High Risk
IP 185.189.48.4 rated at threat level 7/10 based on 7 security reports.
Pattern analysis reveals concerning activity. Confidence: 60%.
More threatening than 88% of monitored IPs
IP Address
185.189.48.4
IPv4
Public
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Sweden
Location
Yelles AB
ASN 206170
7
Reports
Honeypot
Data Source
Threat Categories
Fraud VoIP
7
Technical Details
VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.
Recommended Mitigations
Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
2. November 2026
Last Activity
3. November 2026
Recent (7 days)
7 incidents
High-Risk Network Association
This IP belongs to a network (ASN 206170) with elevated threat levels. The ISP Yelles AB hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
2/10
Very Low
Confidence Score
60%
High Confidence
Confidence History
2. Nov 2026 - 3. Nov 2026
60%
Current
Stable
Trend
Security Reports (7)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.189.48.4
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SE
- ASN
- AS206170
- ISP
- Yelles AB
DNS Information
- Reverse DNS
- prime1.inleed.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 7
- First Reported
- 2 Nov 2026
- Last Reported
- 3 Nov 2026, 20:52
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS206170
Yelles AB
SE
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
28
Total Reports
28
Reports per IP
Network Context
This IP address belongs to Yelles AB (AS206170), which manages 1 IP addresses in our monitoring system. Out of these, 28 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
88
%
Global Threat Ranking
This IP is more threatening than 88% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,326,774 reported IPs worldwide
Threat Level
7/10
avg: 6.0
+
Total Reports
7
avg: 7
=
Network Comparison
Compared against 5 IPs in ASN 206170
Threat Level
7/10
network avg: 8.0
=
Total Reports
7
network avg: 10
-
Network Yelles AB has overall threat level 10/10
Geographic Comparison
Compared against 4,538 IPs in SE
Threat Level
7/10
country avg: 6.1
+
Total Reports
7
country avg: 9
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
2 Nov 2026
5 reports
Daily Average
0.2
reports/day
Most Active
Monday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Fraud VoIP
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,209,279 threat incidents tracked globally • Last 24h: 33,023 Logs
FEED
Top Threat Sources
-
01
Brazil261,018 21.6% -
02
United States206,767 17.1% -
03
India103,488 8.6% -
04
China50,929 4.2% -
05
Argentina42,402 3.5% -
06
SC29,446 2.4% -
07
Mexico27,913 2.3% -
08
Russia26,975 2.2% -
09
Germany24,354 2% -
10
Colombia24,267 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
4
Related IPs
8.3/10
Avg Threat
12%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
5%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
91%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
171.25.158.171
10/10
Confidence
97%
Reports
16
ISP
Patrik Lagerman
34.51.168.251
8/10
Confidence
95%
Reports
12
ISP
Google LLC
13.62.143.68
10/10
Confidence
94%
Reports
53
ISP
Amazon.com, Inc.
193.105.134.45
10/10
Confidence
94%
Reports
32
ISP
w1n ltd
13.62.142.172
10/10
Confidence
94%
Reports
25
ISP
Amazon.com, Inc.
13.51.103.193
10/10
Confidence
94%
Reports
19
ISP
Amazon.com, Inc.
16.192.194.110
10/10
Confidence
94%
Reports
18
ISP
Amazon.com, Inc.
70.34.218.137
10/10
Confidence
94%
Reports
17
ISP
The Constant Co...
172.160.227.37
10/10
Confidence
93%
Reports
24
ISP
Microsoft Corpo...
94.46.55.16
5/10
Confidence
87%
Reports
15
ISP
Miss Hosting AB
138.124.102.99
10/10
Confidence
85%
Reports
84
ISP
Aeza Group LLC
171.25.158.87
10/10
Confidence
85%
Reports
40
ISP
Patrik Lagerman
82.102.6.16
5/10
Confidence
85%
Reports
13
ISP
Miss Hosting AB
188.114.254.45
5/10
Confidence
85%
Reports
13
ISP
Miss Hosting AB
213.102.87.128
8/10
Confidence
82%
Reports
19
ISP
Tele2 SWIPnet
IPs with similar threat level and confidence scores.
15
Related IPs
6.7/10
Avg Threat
60%
Avg Confidence
4
High Threat
Elevated risk: Multiple related IPs are flagged
163.172.46.59
8/10
Confidence
60%
Reports
19
Location
FR
FR
2.59.8.183
6/10
Confidence
60%
Reports
10
Location
US
US
209.207.248.49
6/10
Confidence
60%
Reports
10
Location
US
US
202.89.75.177
6/10
Confidence
60%
Reports
10
Location
US
US
46.183.213.97
6/10
Confidence
60%
Reports
10
Location
US
US
110.172.173.123
6/10
Confidence
60%
Reports
10
Location
US
US
207.45.24.41
6/10
Confidence
60%
Reports
11
Location
US
US
128.121.176.105
6/10
Confidence
60%
Reports
11
Location
US
US
103.118.4.208
6/10
Confidence
60%
Reports
11
Location
US
US
94.176.85.239
6/10
Confidence
60%
Reports
12
Location
US
US
209.207.168.226
6/10
Confidence
60%
Reports
10
Location
US
US
103.117.180.117
10/10
Confidence
60%
Reports
6
Location
IN
IN
51.75.23.111
8/10
Confidence
60%
Reports
18
Location
FR
FR
85.204.70.102
8/10
Confidence
60%
Reports
128
Location
FR
FR
203.168.156.46
6/10
Confidence
60%
Reports
10
Location
US
US