185.192.71.195📋 Copy

# IP Intelligence Briefing: 185.192.71.195

Classification: Low Risk / Passive Infrastructure

Date: 2026-07-29

Risk Score: 25/100

## Executive Summary

IP 185.192.71.195 is a low-risk residential infrastructure endpoint with no active services. The IP shows no evidence of malicious activity, is not blacklisted, and operates within a predominantly clean subnet. Current monitoring indicates minimal threat posture.

## Ownership & Geolocation

• Organization: Jeroen van veen
• ASN: 206092
• Netname: Express-Equinix-London
• Country: GB (England/London)
• RIR: RIPE
• Abuse Contact: jeroen@falco-networks.com

## Network Behavior & Services

• Service Status: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: No PTR hostnames, no forward resolution
• TLS/HTTP: No TLS certificates, no HTTP headers
• Network Role: Not a CDN, proxy, VPN, or hosting provider

## Threat Indicators

• Blacklist Status: Clean (0/8 DNSBLs)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Abuse Confidence: Not applicable
• Campaign Correlation: None observed

## Neighborhood Analysis (185.192.71.0/24)

• Subnet Size: 84 total IPs, 48 active
• Abuse Density: 0.0952 (Low)
• Threat Siblings: 8/84 (9.5%)
• Risk Distribution: Low: 79, Medium: 1, High: 0
• Inherited Risk: 3/100

## Historical Observations

• Total Signals: 13 observations
• Ownership Stability: No changes recorded
• Geolocation Consensus: Mixed signals (GB primary, Netherlands secondary inference)
• Threat Persistence: 0 days (no persistent threats)
• Recent Activity: Signals observed 2026-07-29; no escalation trends

## Relationship Graph

• Connected Entities: Express-Equinix-London (network)
• Associated Hostnames: None
• Certificates: None
• Correlated IPs: None

## Recommended Actions

Status: No immediate action required. IP is within acceptable risk parameters for monitoring.

Firewall Rules: No blocking recommended. Passive monitoring sufficient.

IOC Status: No IOCs to add to threat intelligence feeds.

## Threat Intelligence Narrative

The IP 185.192.71.195 represents benign residential infrastructure with no active service exposure. The endpoint is properly firewalled, showing no open ports or service banners. Geographic signals indicate London-based residency with ownership attributed to Jeroen van veen under ASN 206092. The broader /24 subnet exhibits minimal abuse density (0.0952), with 8 threat siblings representing a 9.5% contamination rate—within normal ranges for residential allocations. Historical telemetry shows 13 observations with no threat persistence or ownership changes. Current risk score of 25/100 combined with zero blacklist hits and no campaign correlations supports classification as low-risk. No immediate security interventions warranted; continue standard monitoring protocols.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.