109.19.185.6📋 Copy

# IP INTELLIGENCE BRIEFING: 109.19.185.6/32

Classification: Low Risk / Mobile Residential

Date Generated: 2026-06-25

Report Type: Full Profile Analysis

---

## EXECUTIVE SUMMARY

IP address 109.19.185.6 is a French mobile residential endpoint associated with SFR (Societe Francaise du Radiotelephone, ASN 15557). Current risk assessment indicates Low Risk (Score: 25). No active threat indicators detected. Historical data shows transient DNSBL listings on 2026-06-05, now cleared. No open services; host is firewalled. Neighboring subnet (109.19.185.0/24) shows zero abuse density.

---

## OWNERSHIP & GEOLOCATION

---

## NETWORK CLASSIFICATION

• Primary Role: Mobile Residential (isMobile: true)
• Infrastructure Type: None (isCloud: false, isCdn: false, isVpn: false, isProxy: false)
• Service Status: Firewalled / No Services (no open ports)
• Tor Exit: No
• Known Attacker: No
• Spam Source: No

---

## THREAT ASSESSMENT

Current Status: Clean

Risk Score: 25 (Low Risk)

Abuse Confidence Score: Not applicable (no active threats)

Blacklist Count: 0

Known Campaigns: None detected

Threat Indicators: None active. No campaigns correlated. No threat feeds triggered.

---

## DNS & EMAIL REPUTATION

---

## OBSERVATION HISTORY

Total Observations: 18

Risk Trend: Stable / Declining

Notable Historical Events:

• 2026-06-05 17:57:54 UTC: Geo-location inferred as France (500km accuracy)
• 2026-06-05 18:00:42 UTC: Subnet classification "clean", abuse density 0
• 2026-06-05 18:01:41 UTC: DNSBL activity detected (8 total listings, 1 active, high severity) — *now cleared*
• 2026-06-25 23:56:48 UTC: Current observation shows minimal signals

Threat Persistence: 0 days

Ownership Changes: 0

---

## NETWORK NEIGHBORHOOD

Subnet: 109.19.185.0/24

Abuse Density: 0 (Clean)

Total Siblings: 1

Threat Siblings: 0

Inherited Risk: 0

---

## RELATIONSHIP ANALYSIS

Total Relationships: 28

• Network Associations: Multiple "Same Network" relationships (N9UF-DYN-DSL network designation)
• DNS Associations: 6.185.19.109.rev.sfr.net (repeated associations)
• External Threat Links: None

---

## CONTROL PLANE DATA

• Origin ASN: 15557
• BGP Prefix: 109.0.0.0/11
• Route Stability: Unstable (isRouteStable: false)
• RPKI State: Not verified
• DNSSEC: Valid
• MOAS: No

---

## RECOMMENDATIONS FOR SOC ANALYSTS

1. Action: No immediate action required. IP shows no active threat indicators.

2. Firewall Rule: Permissive by default; no blocking recommended for legitimate traffic.

3. Monitoring: Track for any change in classification if outbound connections from this IP exhibit anomalous behavior.

4. Context: Mobile residential IP from major French carrier (SFR). Expected behavior for consumer devices.

5. Historical Note: Past DNSBL activity on 2026-06-05 appears resolved; no correlation to current activity.

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.