109.162.207.184
## Intelligence Briefing: 109.162.207.184/32
Classification: Low Risk / Monitoring Status
Date: 2026-07-26
Risk Score: 25/100
---
Executive Summary
IP address 109.162.207.184 is associated with Rightel-ADSL-SERVICES network infrastructure (ASN 25124) with a low-risk profile. The IP is geolocated to Iran (IR) and demonstrates no active malicious behavior. Recent observation history indicates a clean operational state with no threat indicators.
---
Technical Profile
Network Registration:
- ASN: 25124
- Organization: MNT-DATAK / Rightel-ADSL-SERVICES
- CIDR Block: 109.162.192.0/20
- RIR: ARIN
Geolocation:
- Country: IR (Iran)
- Coordinates: 35.7°N, 51.41°E
- GeoValidation: Inconsistent (plausibility check failed)
Service Status:
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- DNS PTR: Unresolved
- HTTP/HTTPS: No services running
---
Threat Assessment
Current Threat Indicators:
- Blacklist Count: 0
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Control Plane Data:
- DNSBL Listings: 1 of 8 total lists
- Route Stability: Unstable
- Operator Score: 0.1304 (Minimal)
- Route Changes (30d): 0
Neighborhood Analysis:
- Subnet: 109.162.207.184/24
- Abuse Density: 0 (Clean)
- Active Siblings: 0
- Threat Siblings: 0
- Risk Distribution: All categories at 0
---
Historical Observations
Observation Count: 16 signals recorded
Recent Activity (2026-07-26):
- 23:14:14 – Geo probe: ICMP blocked, unable to validate; claimed lat/lon: 35.698, 51.4115
- 23:13:38 – Port scan: No open ports detected
- 23:12:27 – Network classification: Not CDN, Tor, VPN, proxy, cloud, or hosting
- 23:10:32 – Subnet classification: Clean with 0 abuse density
Temporal Analysis:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Persistently Malicious: No
- Total Incidents: 0
---
Relationships
Network Relationships:
- Rightel-ADSL-SERVICES (Same Network) – Multiple entries
- No hostname, certificate, or cross-network relationships detected
---
Recommended Actions
Security Posture:
No immediate firewall blocking required. The IP presents minimal risk with no active threat indicators.
Monitoring Recommendations:
- Continue passive monitoring
- No active blocking recommended at this time
- Review if any legitimate services should be exposed on this IP
Firewall Rules:
No specific rules generated due to low-risk classification and absence of active threat signals.
---
Conclusion
IP 109.162.207.184 demonstrates a clean operational profile with no malicious activity. The network exhibits typical residential/ADSL infrastructure characteristics with firewalled services. No SOC intervention required at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | MNT-DATAK |
| ASN | AS25124 |
| Network Name | Rightel-ADSL-SERVICES |
| CIDR Block | 109.162.192.0/20 |
| RIR | ARIN |
| Country | IR |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS25124 |
| Network Prefix | 109.162.192.0/20 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 02:46:02 UTC |
| Last Seen | 2026-09-01 10:51:38 UTC |
| Profile Built | 2026-09-01 10:56:55 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 109.162.207.184
Who owns the IP address 109.162.207.184?
109.162.207.184 is registered to MNT-DATAK. The address falls within the 109.162.192.0/20 network block. Registration is held at ARIN.
Where is 109.162.207.184 located?
Geolocation data places 109.162.207.184 in IR. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 109.162.207.184 malicious or safe?
109.162.207.184 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.