Critical Alert
Security alert: 185.243.96.116 rated 10/10 based on 270 verified incidents.
Threat profile indicates sustained malicious activity with 63% confidence rating.
More threatening than 91% of monitored IPs
IP Address
185.243.96.116
IPv4
Public
UA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
UA
Location
Rices Privately owned ent...
ASN 48693
270
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Moderate Network Risk
The network hosting this IP (ASN 48693, operated by Rices Privately owned enterprise) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
62%
High Confidence
Confidence History
2. Feb 2026 - 4. Feb 2026
63%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 185.243.96.116
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
UA
- ASN
- AS48693
- ISP
- Rices Privately owned enterprise
DNS Information
- Reverse DNS
- send04.labvidaambiental.com.br
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 270
- First Reported
- 15 Aug 2025
- Last Reported
- 5 Feb 2026, 03:27
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS48693
Rices Privately owned enterprise
UA
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10
Total IPs Monitored
111,079
Total Reports
11107.9
Reports per IP
Network Context
This IP address belongs to Rices Privately owned enterprise (AS48693), which manages 10 IP addresses in our monitoring system. Out of these, 111,079 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,508 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
270
avg: 23
++
Network Comparison
Compared against 11 IPs in ASN 48693
Threat Level
10/10
network avg: 9.1
=
Total Reports
270
network avg: 1,676
--
Network Rices Privately owned enterprise has overall threat level 4/10
Geographic Comparison
Compared against 682 IPs in UA
Threat Level
10/10
country avg: 5.6
++
Total Reports
270
country avg: 145
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
72 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
270
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 21:00 with 21 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
10
Related IPs
9/10
Avg Threat
53%
Avg Confidence
9
High Threat
High-risk network: Majority of related IPs are flagged
185.243.96.20
10/10
Confidence
94%
Reports
103
Location
UA
UA
185.243.98.20
10/10
Confidence
94%
Reports
57
Location
US
US
185.243.98.40
10/10
Confidence
66%
Reports
232
Location
US
US
185.243.98.42
10/10
Confidence
66%
Reports
25
Location
US
US
185.243.96.105
10/10
Confidence
59%
Reports
17,727
Location
UA
UA
185.243.96.135
10/10
Confidence
53%
Reports
9
Location
UA
UA
194.38.21.65
7/10
Confidence
39%
Reports
2
Location
UA
UA
185.243.96.107
10/10
Confidence
31%
Reports
6
Location
UA
UA
194.38.20.22
7/10
Confidence
20%
Reports
1
Location
UA
UA
185.243.96.137
6/10
Confidence
4%
Reports
1
Location
UA
UA
IPs from the same subnet range, likely same network segment.
5
Related IPs
9.2/10
Avg Threat
48%
Avg Confidence
4
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.88.138.44
8/10
Confidence
100%
Reports
210
ISP
Ayosoft Ltd
109.95.33.211
10/10
Confidence
100%
Reports
114
ISP
ISP Shtorm LTD
195.49.128.211
10/10
Confidence
100%
Reports
89
ISP
SPD Polyudov Al...
92.60.189.21
10/10
Confidence
100%
Reports
89
ISP
WNET TELECOM US...
193.176.251.229
10/10
Confidence
99%
Reports
20
ISP
CHP Poddubny Se...
92.113.142.203
10/10
Confidence
97%
Reports
25
ISP
IDC Cube
77.83.39.197
10/10
Confidence
96%
Reports
73
ISP
Kprohost LLC
91.201.108.198
8/10
Confidence
96%
Reports
27
ISP
Lugansk Telepho...
77.83.39.9
10/10
Confidence
96%
Reports
17
ISP
Kprohost LLC
92.63.197.22
10/10
Confidence
94%
Reports
989
ISP
FOP Dmytro Nedi...
77.83.39.217
7/10
Confidence
94%
Reports
357
ISP
Kprohost LLC
45.144.212.75
10/10
Confidence
94%
Reports
283
ISP
Kprohost LLC
77.83.39.227
10/10
Confidence
94%
Reports
239
ISP
Kprohost LLC
77.83.39.154
10/10
Confidence
94%
Reports
238
ISP
Kprohost LLC
77.83.39.237
10/10
Confidence
94%
Reports
237
ISP
Kprohost LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
63%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
3.130.96.91
8/10
Confidence
63%
Reports
43,462
Location
US
US
3.134.148.59
8/10
Confidence
63%
Reports
14,980
Location
US
US
92.118.39.87
10/10
Confidence
63%
Reports
14,713
Location
US
US
87.120.191.13
10/10
Confidence
63%
Reports
13,131
Location
US
US
3.137.73.221
8/10
Confidence
63%
Reports
10,228
Location
US
US
3.132.23.201
8/10
Confidence
63%
Reports
9,576
Location
US
US
3.149.59.26
8/10
Confidence
63%
Reports
8,795
Location
US
US
167.250.224.25
10/10
Confidence
63%
Reports
8,244
Location
BR
BR
176.117.107.74
10/10
Confidence
63%
Reports
5,739
Location
NL
NL
142.202.188.211
10/10
Confidence
63%
Reports
4,136
Location
US
US
176.117.107.91
10/10
Confidence
63%
Reports
3,994
Location
NL
NL
196.251.70.234
10/10
Confidence
63%
Reports
3,796
Location
SC
SC
45.88.186.70
8/10
Confidence
63%
Reports
3,632
Location
NL
NL
2.57.122.209
10/10
Confidence
63%
Reports
2,573
Location
RO
RO
64.188.91.248
10/10
Confidence
63%
Reports
2,232
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203