Elevated Risk
Elevated threat level 7/10 for IP 185.228.248.66 from 1 reported incidents.
Behavioral profile indicates cyber threat activity with 29% confidence.
More threatening than 52% of monitored IPs
IP Address
185.228.248.66
IPv4
Public
RU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
Russia
Location
NUBES LLC
ASN 212136
1
Reports
Honeypot
Data Source
Threat Categories
SSH
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 212136) with generally good reputation. The ISP NUBES LLC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
2/10
Very Low
Confidence Score
21%
Low Confidence
Security Reports (1)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.228.248.66
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
RU
- ASN
- AS212136
- ISP
- NUBES LLC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 1
- First Reported
- 14 Jun 2026
- Last Reported
- 14 Jun 2026, 21:06
Comparative Analysis
How this IP compares to others in our threat intelligence database
52
%
Global Threat Ranking
This IP is more threatening than 52% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 389,302 reported IPs worldwide
Threat Level
7/10
avg: 6.0
+
Total Reports
1
avg: 15
--
Network Comparison
Compared against 2 IPs in ASN 212136
Threat Level
7/10
network avg: 8.5
-
Total Reports
1
network avg: 2
-
Geographic Comparison
Compared against 7,258 IPs in RU
Threat Level
7/10
country avg: 6.0
+
Total Reports
1
country avg: 13
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 21:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
361,669 threat incidents tracked globally • Last 24h: 18,080 Logs
FEED
Top Threat Sources
-
01
United States86,674 24% -
02
India56,013 15.5%
-
03
China38,651 10.7%
-
04
Brazil29,241 8.1%
-
05
Germany11,746 3.2%
-
06
Pakistan9,796 2.7%
-
07
Indonesia9,290 2.6%
-
08
Singapore9,050 2.5%
-
09
France7,264 2%
-
10
Russia7,257 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
10/10
Avg Threat
51%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
37.77.150.241
10/10
Confidence
100%
Reports
39
ISP
Proton66 OOO
87.226.190.225
10/10
Confidence
100%
Reports
25
ISP
Rostelecom
176.125.155.238
8/10
Confidence
100%
Reports
23
ISP
Success Ltd
5.35.7.175
8/10
Confidence
99%
Reports
82
ISP
JSC Selectel
46.165.56.242
8/10
Confidence
99%
Reports
55
ISP
Nizhnetagilskie...
85.95.166.40
10/10
Confidence
99%
Reports
53
ISP
Rostelecom
176.211.42.202
10/10
Confidence
99%
Reports
35
ISP
Rostelecom
213.167.43.130
10/10
Confidence
99%
Reports
23
ISP
Digit One LLC
83.171.226.124
10/10
Confidence
99%
Reports
21
ISP
Baykov Ilya Ser...
95.188.91.101
10/10
Confidence
98%
Reports
27
ISP
Rostelecom
194.113.235.89
10/10
Confidence
98%
Reports
22
ISP
Nemtcov Nikolai...
217.168.240.63
10/10
Confidence
98%
Reports
14
ISP
JSC Selectel
81.28.167.30
10/10
Confidence
98%
Reports
12
ISP
Rostelecom
91.205.128.170
8/10
Confidence
97%
Reports
98
ISP
LTD Erline
91.237.163.110
8/10
Confidence
97%
Reports
65
ISP
Systematica LLC
IPs with similar threat level and confidence scores.
15
Related IPs
7.4/10
Avg Threat
29%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
161.35.219.19
7/10
Confidence
29%
Reports
60
Location
DE
DE
167.172.69.97
7/10
Confidence
29%
Reports
57
Location
SG
SG
103.171.117.54
10/10
Confidence
29%
Reports
24
Location
IN
IN
2600:1900:0:2106::1b01
7/10
Confidence
29%
Reports
22
Location
US
US
103.93.105.155
7/10
Confidence
29%
Reports
21
Location
IN
IN
132.148.75.116
8/10
Confidence
29%
Reports
21
Location
US
US
185.169.4.11
5/10
Confidence
29%
Reports
16
Location
GB
GB
103.75.161.7
8/10
Confidence
29%
Reports
15
Location
IN
IN
103.158.121.157
7/10
Confidence
29%
Reports
13
Location
ID
ID
45.131.195.65
8/10
Confidence
29%
Reports
10
Location
US
US
45.131.195.106
8/10
Confidence
29%
Reports
10
Location
US
US
136.243.229.48
7/10
Confidence
29%
Reports
10
Location
DE
DE
43.225.53.201
7/10
Confidence
29%
Reports
10
Location
AE
AE
146.70.184.111
7/10
Confidence
29%
Reports
10
Location
FR
FR
5.44.197.244
8/10
Confidence
29%
Reports
10
Location
SE
SE
Analyzed high-risk IP addresses
- 51.68.207.118
- 185.246.128.133
- 66.132.172.175
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.162
- 66.132.172.172
- 66.132.172.167
- 66.132.172.174
- 66.132.172.161
- 66.132.172.168
- 66.132.172.171
- 66.132.172.173
- 66.132.172.170
- 66.132.172.166
- 66.132.172.169
- 66.132.172.163
- 193.32.162.28
- 80.94.92.183
- 176.65.148.84
- 207.90.244.11
- 85.215.239.226
- 46.151.178.13