Cloud Provider
Detected- Provider Names
- CYBERFIRST LLC
Reported location
Russia (RU)
Powered byIP Geolocation API
Russia
55.78200, 37.60147
Threat score
Powered byIP Security API
Flags detected
Abuse contact
Powered byIP Abuse Contact API
Autonomous system
CYBERFIRST LLC
Powered byASN Records
Organization
CYBERFIRST LLC
Associated company
BUSINESS · cyberfirstsolutions.com
Powered byIP Geolocation API
Network route
Powered byIP Geolocation API
Time zone
2026-10-08 00:47
Powered byTime Zone API
Russia
55.78200, 37.60147
User agent string
Powered byUser Agent API
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
{
"ip" : "185.26.213.22",
"hostname" : "185.26.213.22",
"location" : {
"district" : "Jakimanka",
"city" : "Moskva",
"locality" : "Moskva",
"zipcode" : "127055",
"latitude" : "55.78200",
"longitude" : "37.60147",
"continent_code" : "EU",
"continent_name" : "Europe",
"country_code2" : "RU",
"country_code3" : "RUS",
"country_name" : "Russia",
"country_name_official" : "Russian Federation",
"country_capital" : "Moscow",
"state_prov" : "Moskva",
"state_code" : "RU-MOW",
"accuracy_radius" : "11.7",
"confidence" : "medium",
"dma_code" : "",
"is_eu" : false,
"country_flag" : "https://ipgeolocation.io/static/flags/ru_64.png",
"geoname_id" : "11524497",
"country_emoji" : "🇷🇺"
},
"country_metadata" : {
"tld" : ".ru",
"languages" : [ "ru", "tt", "xal", "cau", "ady", "kv", "ce", "tyv", "cv", "udm", "tut", "mns", "bua", "myv", "mdf", "chm", "ba", "inh", "tut", "kbd", "krc", "av", "sah", "nog" ],
"calling_code" : "+7"
},
"network" : {
"route" : "185.26.213.16/28",
"connection_type" : "",
"is_anycast" : false,
"is_cdn" : false,
"cdn_provider_name" : ""
},
"currency" : {
"code" : "RUB",
"name" : "Russian Ruble",
"symbol" : "₽"
},
"asn" : {
"organization" : "CYBERFIRST LLC",
"country" : "RU",
"type" : "BUSINESS",
"domain" : "cyberfirst.ru",
"rir" : "RIPE",
"as_number" : "AS47122",
"date_allocated" : "2023-10-12"
},
"company" : {
"name" : "Cyberfirst LLC",
"type" : "BUSINESS",
"domain" : "cyberfirstsolutions.com"
},
"security" : {
"threat_score" : 5,
"is_tor" : false,
"is_proxy" : false,
"proxy_provider_names" : [ ],
"proxy_confidence_score" : 0,
"proxy_last_seen" : "",
"is_residential_proxy" : false,
"is_vpn" : false,
"vpn_provider_names" : [ ],
"vpn_confidence_score" : 0,
"vpn_last_seen" : "",
"is_relay" : false,
"relay_provider_name" : "",
"is_anonymous" : false,
"is_known_attacker" : false,
"is_bot" : false,
"bot_confidence_score" : 0,
"bot_operator_name" : "",
"bot_type" : "",
"is_known_good_bot" : false,
"bot_last_seen" : "",
"is_spam" : false,
"is_cloud_provider" : true,
"cloud_provider_name" : "CYBERFIRST LLC",
"is_corporate_gateway" : false,
"corporate_gateway_type" : "",
"corporate_gateway_provider_name" : ""
},
"abuse" : {
"route" : "185.26.213.0/24",
"country" : "RU",
"name" : "Abuse-C Role",
"organization" : "ORG-NCC1-RIPE",
"kind" : "group",
"address" : "RUSSIAN FEDERATION, Moscow, 115054, ul. Dubininskaia, d. 53, str. 5, pom. 1A/1",
"emails" : [ "abuse@cyberfirst.ru" ],
"phone_numbers" : [ "+79250882285" ]
},
"time_zone" : {
"name" : "Europe/Moscow",
"offset" : 3.0,
"offset_with_dst" : 3.0,
"current_time" : "2026-10-08 00:47:10.012+0300",
"current_time_unix" : 1.791409630012E9,
"current_tz_abbreviation" : "MSK",
"current_tz_full_name" : "Moscow Standard Time",
"standard_tz_abbreviation" : "MSK",
"standard_tz_full_name" : "Moscow Standard Time",
"is_dst" : false,
"dst_savings" : 0,
"dst_exists" : false,
"dst_tz_abbreviation" : "",
"dst_tz_full_name" : "",
"dst_start" : { },
"dst_end" : { }
},
"user_agent" : {
"user_agent_string" : "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"name" : "ClaudeBot",
"type" : "Robot",
"version" : "1.0",
"version_major" : "1",
"device" : {
"name" : "Anthropic ClaudeBot",
"type" : "Robot",
"brand" : "Anthropic",
"cpu" : "Unknown"
},
"engine" : {
"name" : "ClaudeBot",
"type" : "Robot",
"version" : "1.0",
"version_major" : "1"
},
"operating_system" : {
"name" : "Cloud",
"type" : "Cloud",
"version" : "??",
"build" : "??",
"version_major" : "??"
}
}
}
Evaluation checklist
What the data tells you about 185.26.213.22.
CYBERFIRST LLC operates AS47122, the autonomous system announcing this address. The associated company is Cyberfirst LLC; the reported network is 185.26.213.16/28.
View ASN APIIP location comes from routing, registry and measurement data. It can shift when CYBERFIRST LLC reassigns the block, so treat Moskva as an estimate, not a fixed point.
View IP Location API
The listed abuse contact is Abuse-C Role. Include the source IP, timestamps with a timezone, and relevant logs so the contact can investigate.
View Abuse Contact APIFor developers
Add IP location, network, and security data to your application.
curl --get 'https://api.ipgeolocation.io/v3/ipgeo' \
--data-urlencode 'apiKey=YOUR_API_KEY' \
--data-urlencode 'ip=185.26.213.22' \
--data-urlencode 'include=*'{ "ip": "185.26.213.22" }