185.141.119.59📋 Copy

## IP Intelligence Briefing: 185.141.119.59/32

Classification: Low Risk / Single-Service Host

Date: Current analysis based on multi-signal observation

---

Executive Summary

IP address 185.141.119.59 is registered to ASN 207990 under network name IN-HOSTROYALE-20160302. The asset carries a risk score of 25 (Low Risk) and is classified as a single-service host with limited operational indicators. No active threat campaigns or known attacker associations were identified. The subnet demonstrates minimal abuse density with no threat-implicated neighbors.

---

Network Ownership & Registration

• ASN: 207990
• Organization: in-hostroyale-1-mnt
• Network Name: IN-HOSTROYALE-20160302
• CIDR Block: 185.141.119.0/24
• RIR: RIPE
• Abuse Contact: Available via RDAP

---

Geolocation Analysis

• Claimed Location: United States, Michigan, Detroit
• Geolocation Consensus: True (based on 1 source)
• Geo Validation Status: Implausible
• Distance Violation: 6,399.5 km claimed with RTT of 50.0ms, below minimum possible 128.0ms for claimed distance
• Average RTT: 51.6ms (5 probes)

The geolocation data shows significant validation inconsistencies, suggesting the IP may be misconfigured or the location data is unreliable.

---

Threat Indicators

• Blacklist Count: 0
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Abuse Confidence Score: Not available
• DNSBL Listings: 1 of 8 lists
• Active Threat Campaigns: None detected

---

Network Classification

• Infrastructure Type: Single-Service Host
• Cloud: No
• CDN: No
• VPN: No
• Proxy: No
• Tor: No
• Hosting: No
• Mobile: No
• Residential: No
• Bogon: No
• Anycast: No

---

Service Exposure

• Open Ports: 8443/TCP (HTTPS-alt)
• TLS Certificate: Not detected
• HTTP Title: Not detected
• Server Banner: Not detected
• DNS Hosted Domains: 0
• PTR Hostnames: None
• Email Auth: No SPF, No DMARC records

---

Subnet Neighborhood Analysis

The /24 subnet 185.141.119.0/24 shows:

• Abuse Density: 0 (Clean)
• Total Siblings: 4
• Active Siblings: 4
• Threat Siblings: 0
• Inherited Risk: 0

Neighbor Risk Distribution:

All neighbors maintain low risk profiles with no abuse indicators.

---

Historical Signal Analysis

Analysis of 17 historical observations reveals:

• Subnet Classification: Consistently "clean" with 0 abuse density
• Threat Persistence: 0 days (not persistently malicious)
• Observation Pattern: Recent activity includes port scanning, traceroute validation, and subnet classification checks
• Ownership Changes: 0 (stable ownership)
• Route Stability: False (network routing may have changes)

---

Control Plane Data

• Origin ASN: 207990
• BGP Prefix: 185.141.119.0/24
• AS Path: Not available
• RPKI State: Not available
• IRR Consistency: Not available
• Route Changes (30d): 0
• DNSSEC Valid: True
• Operator Score: 0.1304 (Minimal)

---

Recommended Actions

Current Risk Score: 25 (Low)

No specific firewall rules or security actions are currently recommended at this risk level. The IP presents minimal threat indicators and maintains a clean neighborhood profile.

SOC Analyst Guidance:

• Monitor port 8443 for suspicious HTTPS traffic patterns
• Geovalidation discrepancies warrant periodic re-validation
• Subnet maintains clean status—no escalation required
• Standard logging and monitoring practices recommended

---

Intelligence Confidence: Moderate

Data Sources: Multi-signal inference, port scanning, traceroute, DNS validation, BGP routing data

Last Updated: Current analysis cycle

*This briefing is based on IPDebrief intelligence platform data and should be combined with other threat intelligence sources before operational decision-making.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.