IP Profile

🖥 43.157.189.246 — Tencent Building, Kejizhongyi Avenue

Tencent Building, Kejizhongyi Avenue · AS132203 · BR · 43.157.189.0/24 · IP Blocklists · threat 0.50 · 29x · 4 sources

reputation 41.9 (ELEVATED) · first seen Aug 06, 2026 · last seen 5d ago
No special flags ip medium-severity auto-tagged

Reputation

41.9
ELEVATED

Threat Score

0.50
29 sightings

ASN

AS132203
from indicator

Peers on ASN

71
malicious co-tenants

Bad neighborhood

0
43.157.189.0/24

Country

BR
from indicator

🕵 Team Cymru Scout

Team Cymru Scout not configured — add config.scout.php or set cymruscout in API Config.

🌐 Network & Geo (local-first)

IP43.157.189.246
OrganizationTencent Building, Kejizhongyi Avenue
ASNAS132203
Netname
Netblock
Reverse DNS (PTR)
CountryBR country intel

Identity resolves from the indicator's own columns first, then on demand from the local ip_ranges dataset by integer range — complete even before the bulk resolver runs.

🔥 Threat severity (AS132203 neighborhood)

High (.5-.75)
72
Avg threat 0.5 · peak 0.5 across 72 local IPs on AS132203

📁 Categories (ASN neighborhood)

🦠 Malware families (ASN neighborhood)

No local data.

🏷 Tags (ASN neighborhood)

auto-tagged
71
medium-severity
71
ip
71

🔌 Sources (ASN neighborhood)

FireHOL: stopforumspam_365d.ipset
61
FireHOL: blocklist_net_ua.ipset
21
FireHOL: firehol_level4.netset
14
FireHOL abusers 30d
7
FireHOL: firehol_abusers_30d.netset
7
FireHOL: stopforumspam_180d.ipset
6
IPsum Level 1
6
IPsum Level 2
6
IPsum level 1 (all)
6
FireHOL: stopforumspam_90d.ipset
5
stamparm ipsum
5
FireHOL: stopforumspam.ipset
5
IPsum Level 3
3
FireHOL: socks_proxy_7d.ipset
3

🌎 Geographic spread

64

📅 First-seen timeline

2026-08
72

Reporting Sources for this IP (4)

FireHOL: firehol_level4.netsetIP Blocklists
FireHOL: firehol_webclient.netsetIP Blocklists
FireHOL: cybercrime.ipsetIP Blocklists
FireHOL webclientIP Reputation

Passive DNS — domains resolving here (0)

No passive DNS yet. Run DNS audit.

🏠 Same /24 — 43.157.189.0/24 (0 other malicious IPs)

No other flagged IPs in this /24 (or subnet data not populated).

📡 Related indicators on AS132203 (71 total, 40 shown)

IPCategoryCountryThreat
129.226.94.181 IP BlocklistsSG dossier
43.173.182.71 IP BlocklistsSG dossier
43.159.143.190 IP BlocklistsUS dossier
43.173.182.145 IP BlocklistsSG dossier
43.173.182.141 IP BlocklistsSG dossier
43.173.182.132 IP BlocklistsSG dossier
43.173.174.87 IP BlocklistsSG dossier
43.173.176.175 IP BlocklistsSG dossier
43.173.176.163 IP BlocklistsSG dossier
43.173.176.159 IP BlocklistsSG dossier
43.173.176.151 IP BlocklistsSG dossier
43.173.176.143 IP BlocklistsSG dossier
43.173.176.139 IP BlocklistsSG dossier
43.173.176.135 IP BlocklistsSG dossier
43.173.176.133 IP BlocklistsSG dossier
43.173.176.131 IP BlocklistsSG dossier
43.173.176.130 IP BlocklistsSG dossier
43.173.176.123 IP BlocklistsSG dossier
43.173.176.122 IP BlocklistsSG dossier
43.173.176.119 IP BlocklistsSG dossier
43.173.176.112 IP BlocklistsSG dossier
43.173.176.110 IP BlocklistsSG dossier
43.173.176.107 IP BlocklistsSG dossier
43.173.176.101 IP BlocklistsSG dossier
43.173.176.95 IP BlocklistsSG dossier
43.173.176.90 IP BlocklistsSG dossier
43.173.176.89 IP BlocklistsSG dossier
43.173.176.88 IP BlocklistsSG dossier
43.173.176.74 IP BlocklistsSG dossier
43.173.176.48 IP BlocklistsSG dossier
43.173.176.35 IP BlocklistsSG dossier
43.173.174.251 IP BlocklistsSG dossier
43.173.174.237 IP BlocklistsSG dossier
43.173.174.234 IP BlocklistsSG dossier
43.173.174.213 IP BlocklistsSG dossier
43.173.174.210 IP BlocklistsSG dossier
43.173.174.208 IP BlocklistsSG dossier
43.173.174.187 IP BlocklistsSG dossier
43.173.174.175 IP BlocklistsSG dossier
43.173.174.152 IP BlocklistsSG dossier
Full ASN dossier →

Case & Takedown Links

No cases or takedowns yet.

+ Case Takedown

Enrichments

ipinfo ipinfo classification

Stored Enrichment Data Enrich Now

3 enrichment records on file (history preserved).

📁 Case Management

+ New case from this
Identity resolves local-first: the indicator's own asn/country columns, else on-demand integer-range lookup against the local ip_ranges dataset — so ASN, org and country populate even before the bulk resolver finishes and even for IPs not yet ingested. Analytics, neighborhood and graph render entirely from the local database; live reputation providers augment only when keys and outbound access are available.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php