Substantial Risk
Threat level 8/10 for 85.185.201.10 based on 13 documented incidents.
Consistent suspicious behavior patterns. 91% confidence rating.
More threatening than 90% of monitored IPs
IP Address
85.185.201.10
IPv4
Public
IR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Iran
Location
Iran Telecommunication Co...
ASN 58224
13
Reports
Honeypot
Data Source
Threat Categories
SSH
13
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
18. September 2026
Last Activity
25. September 2026
Recent (7 days)
3 incidents
High-Risk Network Association
This IP belongs to a network (ASN 58224) with elevated threat levels. The ISP Iran Telecommunication Company PJS hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
91%
Verified
Confidence History
5. Jul 2026 - 25. Sep 2026
91%
Current
Stable
Trend
Security Reports (13)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 85.185.201.10
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IR
- ASN
- AS58224
- ISP
- Iran Telecommunication Company PJS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 13
- First Reported
- 5 Jul 2026
- Last Reported
- 25 Sep 2026, 16:52
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS58224
Iran Telecommunication Company PJS
IR
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
52
Total IPs Monitored
2,147
Total Reports
41.3
Reports per IP
Network Context
This IP address belongs to Iran Telecommunication Company PJS (AS58224), which manages 52 IP addresses in our monitoring system. Out of these, 2,147 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 810,291 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
13
avg: 9
+
Network Comparison
Compared against 349 IPs in ASN 58224
Threat Level
8/10
network avg: 7.0
=
Total Reports
13
network avg: 7
++
Network Iran Telecommunication Company PJS has overall threat level 7/10
Geographic Comparison
Compared against 1,679 IPs in IR
Threat Level
8/10
country avg: 7.2
=
Total Reports
13
country avg: 28
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
25 Sep 2026
3 reports
Daily Average
0.3
reports/day
Most Active
Friday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
13
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
736,823 threat incidents tracked globally • Last 24h: 32,334 Logs
FEED
Top Threat Sources
-
01
United States144,007 19.5% -
02
Brazil110,887 15%
-
03
India82,831 11.2%
-
04
China44,948 6.1%
-
05
SC29,241 4%
-
06
Germany17,642 2.4%
-
07
Netherlands17,550 2.4%
-
08
Pakistan16,808 2.3%
-
09
Argentina16,197 2.2%
-
10
Colombia15,142 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.2/10
Avg Threat
42%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
78.38.84.140
10/10
Confidence
100%
Reports
23
Location
IR
IR
2.180.32.104
8/10
Confidence
84%
Reports
15
Location
IR
IR
46.100.116.237
10/10
Confidence
53%
Reports
4
Location
IR
IR
2.179.179.140
10/10
Confidence
42%
Reports
3
Location
IR
IR
80.210.30.110
8/10
Confidence
40%
Reports
3
Location
IR
IR
5.74.51.174
10/10
Confidence
39%
Reports
3
Location
IR
IR
93.118.170.58
7/10
Confidence
39%
Reports
2
Location
IR
IR
78.38.208.5
10/10
Confidence
37%
Reports
4
Location
IR
IR
78.38.41.159
7/10
Confidence
36%
Reports
2
Location
IR
IR
217.218.153.56
7/10
Confidence
36%
Reports
2
Location
IR
IR
46.100.95.108
7/10
Confidence
36%
Reports
2
Location
IR
IR
37.255.153.3
7/10
Confidence
36%
Reports
2
Location
IR
IR
93.118.132.228
7/10
Confidence
36%
Reports
2
Location
IR
IR
46.100.10.56
10/10
Confidence
35%
Reports
3
Location
IR
IR
85.185.206.229
10/10
Confidence
33%
Reports
3
Location
IR
IR
37.255.128.90
7/10
Confidence
33%
Reports
2
Location
IR
IR
85.185.235.59
7/10
Confidence
33%
Reports
2
Location
IR
IR
78.38.140.117
7/10
Confidence
33%
Reports
2
Location
IR
IR
78.38.132.66
7/10
Confidence
32%
Reports
2
Location
IR
IR
5.232.3.61
7/10
Confidence
30%
Reports
1
Location
IR
IR
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
78.38.84.140
10/10
Confidence
100%
Reports
23
ISP
Iran Telecommun...
37.32.22.70
10/10
Confidence
99%
Reports
19
ISP
Noyan Abr Arvan...
95.38.177.52
10/10
Confidence
99%
Reports
16
ISP
Noyan Abr Arvan...
185.112.33.84
10/10
Confidence
98%
Reports
19
ISP
Asiatech Data T...
62.60.130.117
8/10
Confidence
97%
Reports
17
ISP
Cipher Operatio...
192.253.248.145
8/10
Confidence
96%
Reports
26
ISP
Limited Network...
77.90.185.20
8/10
Confidence
95%
Reports
155
ISP
Limited Network...
77.90.185.226
7/10
Confidence
95%
Reports
28
ISP
Limited Network...
152.89.12.101
10/10
Confidence
95%
Reports
14
ISP
Sharif Universi...
94.182.168.135
8/10
Confidence
95%
Reports
12
ISP
Aria Shatel PJSC
192.253.248.215
10/10
Confidence
94%
Reports
1,757
ISP
Limited Network...
192.253.248.251
10/10
Confidence
94%
Reports
1,468
ISP
Limited Network...
185.93.89.61
10/10
Confidence
94%
Reports
16
ISP
Limited Network...
213.176.24.43
7/10
Confidence
92%
Reports
12
ISP
KOI CLOUD SERVI...
85.198.19.241
10/10
Confidence
92%
Reports
11
ISP
Asre Dadeha Asi...
IPs with similar threat level and confidence scores.
15
Related IPs
7.5/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
192.161.49.2
8/10
Confidence
91%
Reports
5,397
Location
US
US
51.75.106.116
7/10
Confidence
91%
Reports
2,590
Location
FR
FR
172.110.223.118
7/10
Confidence
91%
Reports
1,808
Location
HK
HK
172.110.223.179
7/10
Confidence
91%
Reports
1,557
Location
PH
PH
179.43.167.3
7/10
Confidence
91%
Reports
733
Location
CH
CH
31.70.73.121
7/10
Confidence
91%
Reports
631
Location
DE
DE
172.110.223.87
7/10
Confidence
91%
Reports
607
Location
HK
HK
31.70.90.134
7/10
Confidence
91%
Reports
564
Location
DE
DE
31.70.65.40
7/10
Confidence
91%
Reports
528
Location
DE
DE
87.106.201.203
7/10
Confidence
91%
Reports
519
Location
DE
DE
203.154.158.195
10/10
Confidence
91%
Reports
436
Location
TH
TH
118.37.214.187
10/10
Confidence
91%
Reports
433
Location
KR
KR
45.148.9.11
7/10
Confidence
91%
Reports
430
Location
US
US
148.66.153.237
7/10
Confidence
91%
Reports
389
Location
SG
SG
31.70.77.230
7/10
Confidence
91%
Reports
378
Location
DE
DE