Intermediate Threat
Threat level 6/10 for 185.191.116.162 from 1 reports.
Concerning behaviors alongside normal activity. 27% confidence.
More threatening than 59% of monitored IPs
IP Address
185.191.116.162
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
Germany
Location
UAB Cherry Servers
ASN 213896
1
Reports
Honeypot
Data Source
Threat Categories
Fraud VoIP
1
Technical Details
VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.
Recommended Mitigations
Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
8. October 2026
Last Activity
8. October 2026
Recent (7 days)
1 incidents
High-Risk Network Association
This IP belongs to a network (ASN 213896) with elevated threat levels. The ISP UAB Cherry Servers hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Monitor for behavior pattern changes indicating escalation.
Long-term blocking recommended.
Reputation Summary
Threat Level
6/10
Medium
High
Activity Frequency
2/10
Very Low
Confidence Score
27%
Medium Confidence
Security Reports (1)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Fraud VoIP | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.191.116.162
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS213896
- ISP
- UAB Cherry Servers
DNS Information
- Reverse DNS
- ip-185-191-116-162.005.ptr.cherryservers.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 1
- First Reported
- 8 Oct 2026
- Last Reported
- 8 Oct 2026, 23:26
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS213896
UAB Cherry Servers
DE
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
4
Total Reports
4
Reports per IP
Network Context
This IP address belongs to UAB Cherry Servers (AS213896), which manages 1 IP addresses in our monitoring system. Out of these, 4 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
59
%
Global Threat Ranking
This IP is more threatening than 59% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 837,945 reported IPs worldwide
Threat Level
6/10
avg: 6.3
=
Total Reports
1
avg: 9
--
Network Comparison
Compared against 8 IPs in ASN 213896
Threat Level
6/10
network avg: 7.0
=
Total Reports
1
network avg: 6
--
Network UAB Cherry Servers has overall threat level 10/10
Geographic Comparison
Compared against 18,549 IPs in DE
Threat Level
6/10
country avg: 7.3
-
Total Reports
1
country avg: 30
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Thursday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Fraud VoIP
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
761,580 threat incidents tracked globally • Last 24h: 30,347 Logs
FEED
Top Threat Sources
-
01
United States149,044 19.6% -
02
Brazil112,099 14.7%
-
03
India88,130 11.6%
-
04
China46,240 6.1%
-
05
SC29,255 3.8%
-
06
Germany18,549 2.4%
-
07
Netherlands18,096 2.4%
-
08
Pakistan18,020 2.4%
-
09
Argentina16,337 2.1%
-
10
Colombia15,199 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
7
Related IPs
7.1/10
Avg Threat
37%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
185.191.118.16
7/10
Confidence
80%
Reports
23
Location
DE
DE
88.216.36.112
7/10
Confidence
59%
Reports
10
Location
DE
DE
185.191.118.200
7/10
Confidence
44%
Reports
6
Location
DE
DE
185.191.116.220
6/10
Confidence
29%
Reports
2
Location
DE
DE
185.191.118.149
6/10
Confidence
24%
Reports
2
Location
DE
DE
185.191.118.216
7/10
Confidence
23%
Reports
1
Location
DE
DE
88.216.70.186
10/10
Confidence
1%
Reports
3
Location
DE
DE
IPs from the same subnet range, likely same network segment.
1
Related IPs
6/10
Avg Threat
29%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,063
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
193.24.211.218
10/10
Confidence
100%
Reports
126
ISP
Data Campus Lim...
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
2a0f:ca80:b00b:8089::5
8/10
Confidence
100%
Reports
48
ISP
TechTies Inc.
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
35.234.68.116
10/10
Confidence
100%
Reports
38
ISP
Google LLC
34.159.0.93
8/10
Confidence
100%
Reports
37
ISP
Google LLC
34.185.254.148
8/10
Confidence
100%
Reports
27
ISP
Google LLC
167.172.176.118
10/10
Confidence
100%
Reports
23
ISP
DigitalOcean, LLC
151.243.113.84
8/10
Confidence
100%
Reports
18
ISP
Dedik Services ...
45.140.42.24
10/10
Confidence
100%
Reports
16
ISP
Clouvider Limited
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
50.7.86.141
8/10
Confidence
100%
Reports
14
ISP
FDCservers.net
IPs with similar threat level and confidence scores.
15
Related IPs
6/10
Avg Threat
27%
Avg Confidence
45.165.12.59
6/10
Confidence
27%
Reports
1
Location
BR
BR
103.81.230.97
6/10
Confidence
27%
Reports
1
Location
US
US
57.129.80.197
6/10
Confidence
27%
Reports
1
Location
DE
DE
34.78.174.86
6/10
Confidence
27%
Reports
1
Location
BE
BE
23.234.97.242
6/10
Confidence
27%
Reports
1
Location
US
US
162.141.167.65
6/10
Confidence
27%
Reports
1
Location
US
US
1.192.83.82
6/10
Confidence
27%
Reports
1
Location
CN
CN
72.50.4.161
6/10
Confidence
27%
Reports
1
Location
PR
PR
119.184.88.61
6/10
Confidence
27%
Reports
1
Location
CN
CN
147.92.98.181
6/10
Confidence
27%
Reports
1
Location
US
US
187.38.61.145
6/10
Confidence
27%
Reports
1
Location
BR
BR
31.222.109.238
6/10
Confidence
27%
Reports
1
Location
ES
ES
185.204.35.73
6/10
Confidence
27%
Reports
1
Location
AL
AL
179.60.89.7
6/10
Confidence
27%
Reports
1
Location
CL
CL
191.103.33.69
6/10
Confidence
27%
Reports
1
Location
AR
AR