185.125.189.186
Intelligence briefing for IP address 185.125.189.186/32. The asset was registered to Canonical Ltd Admin under ASN 41231, with geolocation data placing the host in London, England. Network profiling classified the service as a Web Server.
Threat analysis indicated a "Low Risk" reputation with a risk score of 0. The address was not detected on known blacklists, and no active threat campaigns were associated with the IP. Behavioral monitoring recorded zero incidents, including no honeypot hits, enumeration strikes, or WAF violations.
Service enumeration identified open ports 80 (HTTP), 443 (HTTPS), and 22 (SSH). The SSH banner displayed Twisted_20.3.0+lp11. TLS certificates were issued by Let's Encrypt for the private-ppa.launchpad.net domain.
Due to the absence of significant risk indicators, the recommended action was "Allow" with an information-level severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Canonical Ltd Admin |
| ASN | AS41231 |
| Network Name | UK-CANONICAL-20151111 |
| CIDR Block | 185.125.188.0/22 |
| RIR | RIPE |
| Country | GB |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-Twisted_20.3.0+lp11 ???'3^?q?4??s??mlkem768x25519-sha256,curve25519-sha256,curve25519-sha25 |
🔐 TLS Certificate
| SANs | private-ppa.launchpad.net |
| Valid From | 2026-09-04T10:14:38+00:00 |
| Valid Until | 2026-12-03T10:14:37+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 89 days |
| Serial Number | 06247A465EF8189E0091F6DEEC389CBA457B |
| Thumbprint | 9E757AC5842ADF90739A03BBD8E431B9D0780110 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-25 01:47:16 UTC |
| Last Seen | 2026-09-25 01:47:16 UTC |
| Profile Built | 2026-09-25 02:01:43 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.