130.185.77.4📋 Copy

# IP Intelligence Briefing: 130.185.77.4/32

Classification: Low Risk

Date: Current Intelligence Cycle

Prepared For: SOC Operations Team

---

## Executive Summary

IP address 130.185.77.4 is classified as Low Risk with a risk score of 25/100. The asset belongs to Pars Parva System LTD (ASN 60631) and operates within the ParsPack network (130.185.77.0/24) in Iran. No active threat indicators, malware associations, or campaign correlations were detected. The IP appears to be firewalled with no active services.

---

## Technical Profile

---

## Threat Indicators

• Abuse Confidence: Not scored (insufficient malicious activity)
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0
• Threat Persistence: Not persistent
• Honeypot Hits: 0

---

## Network Neighborhood Analysis

• Subnet: 130.185.77.0/24
• Abuse Density: 0 (Clean)
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings: 1
• Classification: Clean

The /24 subnet shows no significant abuse activity or correlated threat behavior.

---

## Historical Observation Timeline

13 observations recorded, with most recent activity on July 22, 2026. Key observations include:

• Ownership registration data (Pars Parva System LTD, ParsPack)
• Network classification updates (clean, low inherited risk)
• Scanning activity detected (SSH, port scanning)
• No evidence of escalating risk or persistent malicious behavior

---

## Control Plane Assessment

• Route Stability: Not stable
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)
• BGP Prefix: 130.185.77.0/24
• IRRP Consistency: Not verified
• Route Changes (30d): 0

---

## Related Entities

• Same Network: ParsPack (repeated associations)
• External Relationships: None detected
• Hosted Domains: None
• Certificates: None

---

## Security Recommendations

Based on the low-risk classification and absence of threat indicators, no immediate blocking actions are recommended. Standard monitoring practices apply. The IP does not require aggressive firewall rules or WAF policies.

Recommended Actions: None at this time

Firewall Rules: Not applicable

Monitoring Level: Standard

---

## Conclusion

IP 130.185.77.4 represents a low-risk infrastructure address with no active threat indicators. The asset is properly registered with ARIN and operates within a clean network neighborhood. SOC teams may continue standard monitoring without escalation or blocking measures.

---

*Intelligence generated by IPDebrief Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.