# 185.192.16.28 — IP Intelligence Summary 185.192.16.28 is an IPv4 address operated by VPN Consumer Dublin, Ireland (AS206092), geolocated to Dublin, Ireland. As of August 30, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/185.192.16.28 - Last updated: 2026-08-30 ## Ownership - Organization: VPN Consumer Dublin, Ireland - Network name: DUBLIN-IE-185-192-16-0 - Allocated block: 185.192.16.0/24 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: RIPE ## Location - City: Dublin - Region: Leinster - Country: Ireland - Time zone: Europe/Dublin ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative **IP INTELLIGENCE BRIEFING: 185.192.16.28/32** **Date:** 2026-07-27 **Classification:** Low Risk / Defensive Monitoring Recommended \--- **EXECUTIVE SUMMARY** IP address 185.192.16.28 is a low-risk endpoint associated with a VPN consumer network in Dublin, Ireland (ASN 206092). The IP exhibits no active threat indicators, no open services, and no blacklist associations. The surrounding /24 subnet shows mixed classification with elevated residential/VPN activity patterns. No immediate defensive action is required beyond routine monitoring. \--- **NETWORK IDENTIFICATION** \- **IP Address:** 185.192.16.28/32 \- **ASN:** 206092 \- **Organization:** VPN Consumer Dublin, Ireland \- **Network Name:** DUBLIN-IE-185-192-16-0 \- **CIDR Block:** 185.192.16.0/24 \- **RIR:** RIPE \- **Registration:** Via RDAP **Geolocation:** \- **Country:** Ireland (IE) \- **Region:** Leinster \- **City:** Dublin \- **Coordinates:** 52.67°N, -1.63°W \- **Timezone:** Europe/Dublin \--- **RISK ASSESSMENT** \- **Overall Risk Score:** 25/100 (Low Risk) \- **Abuse Confidence Score:** Not applicable \- **Blacklist Status:** Clean (0/0 lists) \- **Threat Classifications:** \- Not Tor Exit Node: Confirmed \- Not Known Attacker: Confirmed \- Not Spam Source: Confirmed \- Not Cloud/CDN/Proxy: Confirmed \--- **NETWORK BEHAVIOR & SERVICES** \- **Network Role:** Firewalled / No Services Detected \- **Open Ports:** None \- **HTTP/HTTPS:** No services detected \- **DNS Resolution:** No PTR records; no forward resolution \- **TLS Certificates:** None observed \- **Email Authentication:** Not configured (no SPF/DMARC) \--- **CONTROL PLANE DATA** \- **BGP Prefix:** 185.192.16.0/24 \- **Route Stability:** False (route changes detected) \- **DNSSEC:** Valid \- **DNSBL Listings:** 1 of 8 lists checked \- **Hops to Target:** 11 (Comcast transit) \- **RTT Metrics:** Avg 97.6ms, Min 95ms, Max 103ms \- **Geolocation Validation:** Plausible (distance 867.9km from probe point) \--- **NEIGHBORHOOD ANALYSIS (185.192.16.0/24)** \- **Total Subnet Size:** 36 IPs \- **Active Siblings:** 21 \- **Threat Siblings:** 9 \- **Abuse Density:** 0.25 (25%) \- **Subnet Classification:** Mixed \- **Inherited Risk:** 10/100 **Risk Distribution:** \- High Risk: 0 IPs \- Medium Risk: 0 IPs \- Low Risk: 35 IPs (including 185.192.16.28) The neighborhood exhibits typical VPN/residential proxy patterns with multiple endpoints sharing similar risk profiles. \--- **RELATIONSHIP GRAPH** \- **Same Network Relationships:** 4 entries (DUBLIN-IE-185-192-16-0) \- **External Entities:** None identified \- **Associated Organizations:** None \- **Certificates:** None \- **Hostnames:** None \--- **OBSERVATION HISTORY** **Total Observations:** 18 events **Most Recent:** 2026-07-27T08:57:51 UTC **Recent Signal Types:** 1. Network classification (confidence 0.30) - No CDN/VPN/Proxy detected 2. Traceroute (confidence 0.70) - 11 hops, target reached 3. Geolocation validation (confidence 0.75) - Distance 867.9km, RTT avg 97.6ms 4. Port scan (confidence 0.70) - No open ports, 2+ ports scanned 5. Subnet analysis (confidence 0.75) - Abuse density 0.25, mixed classification **Threat Persistence:** 0 days **Ownership Changes:** 0 **Malicious Activity:** None observed \--- **THREAT INDICATORS** \- **Campaign Correlation:** None \- **Certificate Matches:** 0 \- **Banner Matches:** 0 \- **Correlated IPs:** 0 \- **Known Malware Campaigns:** None \--- **RECOMMENDED ACTIONS** **Current Risk Level:** Low **Action Required:** Routine monitoring only **Firewall Rules:** Not recommended at this time (risk score 25) **Monitoring Parameters:** \- Track subnet abuse density trends \- Monitor for service openings (firewall changes) \- Watch for blacklist additions \- Track route stability changes \--- **INTELLEIGENCE NARRATIVE** The IP 185.192.16.28 represents a low-risk consumer endpoint within a VPN infrastructure network operating from Dublin, Ireland. The absence of open services, clean threat indicators, and lack of blacklist associations indicate benign usage. The associated /24 subnet demonstrates mixed classification with 25% abuse density, consistent with residential/VPN proxy networks. No malicious activity has been observed in the observation window. The IP's firewalled state prevents direct service enumeration. Routine defensive monitoring is appropriate; no immediate blocking or alerting is warranted. \--- **ASSIGNMENT:** SOC Monitoring / Defensive Awareness **PRIORITY:** Routine **CONFIDENCE:** High (based on multi-source validation) ## Nearby addresses - 185.192.16.1 (https://ipdebrief.com/185.192.16.1) - 185.192.16.2 (https://ipdebrief.com/185.192.16.2) - 185.192.16.3 (https://ipdebrief.com/185.192.16.3) - 185.192.16.5 (https://ipdebrief.com/185.192.16.5) - 185.192.16.6 (https://ipdebrief.com/185.192.16.6) - 185.192.16.7 (https://ipdebrief.com/185.192.16.7) - 185.192.16.9 (https://ipdebrief.com/185.192.16.9) - 185.192.16.10 (https://ipdebrief.com/185.192.16.10) - 185.192.16.11 (https://ipdebrief.com/185.192.16.11) - 185.192.16.12 (https://ipdebrief.com/185.192.16.12) - 185.192.16.14 (https://ipdebrief.com/185.192.16.14) - 185.192.16.16 (https://ipdebrief.com/185.192.16.16) --- Source: IPDebrief, "185.192.16.28 IP intelligence", https://ipdebrief.com/185.192.16.28, updated 2026-08-30. Assessments are probabilistic.