Extreme Threat
IP 5.202.33.213 classified at threat level 10/10 with 9 documented attacks.
Advanced threat indicators confirmed with 43% certainty.
More threatening than 85% of monitored IPs
IP Address
5.202.33.213
IPv4
Public
IR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
IR
Location
Pishgaman Toseeh Ertebata...
ASN 49100
9
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
9
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
High-Risk Network Association
This IP belongs to a network (ASN 49100) with elevated threat levels. The ISP Pishgaman Toseeh Ertebatat Company (Private Joint Stock) hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
42%
Medium Confidence
Confidence History
15. Sep 2025
43%
Current
Stable
Trend
Security Reports (9)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 5.202.33.213
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IR
- ASN
- AS49100
- ISP
- Pishgaman Toseeh Ertebatat Company (Private Joint Stock)
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 9
- First Reported
- 15 Sep 2025
- Last Reported
- 15 Sep 2025, 14:20
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS49100
Pishgaman Toseeh Ertebatat Company (Private Joint Stock)
IR
Network Threat Assessment
9/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
3
Total IPs Monitored
15
Total Reports
5
Reports per IP
Network Context
This IP address belongs to Pishgaman Toseeh Ertebatat Company (Private Joint Stock) (AS49100), which manages 3 IP addresses in our monitoring system. Out of these, 15 have been reported for suspicious activities, resulting in a network-wide threat level of 9/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,604 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
9
avg: 23
--
Network Comparison
Compared against 6 IPs in ASN 49100
Threat Level
10/10
network avg: 7.3
+
Total Reports
9
network avg: 10
=
Network Pishgaman Toseeh Ertebatat Company (Private Joint Stock) has overall threat level 9/10
Geographic Comparison
Compared against 591 IPs in IR
Threat Level
10/10
country avg: 7.1
+
Total Reports
9
country avg: 55
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
5
Related IPs
6.8/10
Avg Threat
43%
Avg Confidence
4
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
62.60.130.233
8/10
Confidence
100%
Reports
144
ISP
Cipher Operatio...
62.60.130.227
8/10
Confidence
100%
Reports
122
ISP
Cipher Operatio...
62.60.130.230
8/10
Confidence
100%
Reports
103
ISP
Cipher Operatio...
62.60.130.235
8/10
Confidence
100%
Reports
90
ISP
Cipher Operatio...
217.60.241.103
8/10
Confidence
100%
Reports
52
ISP
Pfcloud UG (haf...
62.60.130.182
8/10
Confidence
100%
Reports
46
ISP
Cipher Operatio...
62.60.130.128
8/10
Confidence
100%
Reports
40
ISP
Cipher Operatio...
185.93.89.27
10/10
Confidence
99%
Reports
75
ISP
Limited Network...
172.94.9.154
10/10
Confidence
99%
Reports
70
ISP
Limited Network...
172.94.9.153
8/10
Confidence
99%
Reports
67
ISP
Limited Network...
192.253.248.45
8/10
Confidence
99%
Reports
63
ISP
Limited Network...
62.60.130.239
8/10
Confidence
99%
Reports
28
ISP
Cipher Operatio...
94.101.184.145
10/10
Confidence
98%
Reports
15
ISP
Noyan Abr Arvan...
62.60.130.224
10/10
Confidence
97%
Reports
78
ISP
Cipher Operatio...
62.60.130.223
8/10
Confidence
97%
Reports
55
ISP
Cipher Operatio...
IPs with similar threat level and confidence scores.
15
Related IPs
7.9/10
Avg Threat
43%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.92.243.243
7/10
Confidence
43%
Reports
118
Location
US
US
45.33.68.66
10/10
Confidence
43%
Reports
48
Location
US
US
142.93.120.13
8/10
Confidence
43%
Reports
48
Location
US
US
83.118.47.249
10/10
Confidence
43%
Reports
46
Location
TH
TH
185.220.100.255
8/10
Confidence
43%
Reports
43
Location
DE
DE
45.149.173.201
8/10
Confidence
43%
Reports
29
Location
US
US
185.246.188.115
8/10
Confidence
43%
Reports
29
Location
NL
NL
178.20.55.182
8/10
Confidence
43%
Reports
28
Location
FR
FR
103.139.144.127
7/10
Confidence
43%
Reports
23
Location
BD
BD
171.25.193.79
8/10
Confidence
43%
Reports
19
Location
SE
SE
92.205.167.152
8/10
Confidence
43%
Reports
16
Location
FR
FR
3.12.12.136
7/10
Confidence
43%
Reports
16
Location
US
US
54.206.20.150
7/10
Confidence
43%
Reports
15
Location
AU
AU
39.63.164.181
7/10
Confidence
43%
Reports
14
Location
PK
PK
185.223.152.64
8/10
Confidence
43%
Reports
13
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203