185.130.156.215📋 Copy

# IP Intelligence Briefing: 185.130.156.215/32

## Executive Summary

The IP address 185.130.156.215 presents a low-risk profile with no active threat indicators. This address is part of the UK-AIRBAND network infrastructure located in Droitwich, United Kingdom. The IP is currently firewalled with no active services, and the /24 subnet shows clean classification with minimal abuse density.

## Technical Profile

Ownership and Infrastructure:

• ASN: 203568
• Organization: mnt-abnd-co
• Network: UK-AIRBAND-UK-20151209 (185.130.156.0/22)
• RIR: RIPE
• Geolocation: Droitwich, Worcester, GB (Europe/London timezone)
• Registration: RIR registry confirmed

Network Classification:

• Risk Score: 25/100 (Low Risk)
• Subnet Classification: Clean
• Abuse Density: 0%
• Threat Indicators: None
• Blacklist Status: 0/0 (Not listed)

Service Analysis:

• Open Ports: None detected
• DNS Resolution: No PTR records, no forward resolution
• Hosted Domains: 0
• Email Authentication: No SPF/DMARC records
• HTTP Services: Not responding (firewalled)

## Threat Assessment

Current Risk Level: Low

• No known attacker indicators
• Not a spam source
• Not a Tor exit node
• No known campaign associations
• No threat feed matches

Control Plane Analysis:

• Route stability: Unstable (route changes observed)
• DNSBL listings: 1 of 8 total lists
• BGP prefix: 185.130.156.0/24
• RPKI state: Not validated

## Historical Analysis

Observation Timeline: 13 signals observed

Threat Persistence: None

Ownership Changes: 0

Risk Trend: Stable

Recent observations indicate:

• Geolocation signals consistently point to GB (United Kingdom)
• Network ownership stable with no provider changes
• Subnet classification remains clean

## Neighborhood Analysis

Subnet: 185.130.156.0/24

• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0%
• Risk Distribution: No high/medium risk neighbors

## Relationship Graph

Linked Entities:

• 3 same-network relationships to UK-AIRBAND-UK-20151209 network
• No associations to external organizations, hostnames, or certificates
• No certificate matches in threat intelligence feeds

## Recommended Security Actions

Current Risk: No immediate action required

Firewall Recommendations:

• No specific blocking rules recommended
• IP may be allowed through standard allow policies
• Monitor for service activation if previously blocked

Additional Monitoring:

• Route instability noted; monitor BGP prefix changes
• One DNSBL listing warrants periodic review
• No active threat indicators; standard monitoring sufficient

## Intelligence Assessment

IP 185.130.156.215 is a legitimate UK-based infrastructure address with no evidence of malicious activity. The address is firewalled with no active services, suggesting it may be a reserved or decommissioned IP. The surrounding /24 subnet shows clean classification with no adjacent threat activity. No SOC action required beyond routine monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.