# IP Intelligence Briefing: 185.192.71.65/32
Classification: Low Risk / Residential or Hosting Infrastructure
Report Date: 2026-07-29
Analyst: IPDebrief Intelligence Team
---
## Executive Summary
IP 185.192.71.65 is a low-risk residential or hosting endpoint located in London, England (GB), belonging to ASN 206092 (Jeroen van veen, Express-Equinix-London). The address exhibits minimal threat indicators with a risk score of 25/100. No active malicious campaigns, Tor exit node activity, or known attacker reputation were detected. The IP maintains a stable ownership record with zero observed changes.
---
## Technical Profile
Network Classification:
- ASN: 206092 (Jeroen van veen)
- CIDR: 185.192.71.0/24
- RIR: RIPE
- Infrastructure Type: Residential / Hosting
- Network Role: Firewalled / No Services Detected
Geolocation:
- Country: Great Britain (GB)
- Region: England
- City: London
- Coordinates: 53.86°N, 0.63°E
- GeoValidation Status: Plausibility flag not confirmed (geoPlausible: false)
Network Behavior:
- Traceroute: 14 hops
- RTT Metrics: First hop 0.2ms, Last hop 94.6ms
- Timeouts: 4 hops
- Transit Networks: Comcast
- BGP Stability: Unstable routing
---
## Threat Assessment
Risk Indicators:
- Overall Risk Score: 25/100 (Low Risk)
- Abuse Confidence Score: Not detected
- Threat Feeds: None
- Known Campaigns: None
- Blacklist Count: 0 active entries
Threat Signals:
- Not a Tor exit node
- Not identified as a known attacker
- Not flagged as a spam source
- No threat indicators in feeds
- Zero persistent malicious activity observed
DNS/Email Reputation:
- DNSBL Listed: 1 of 8 lists (12.5%)
- No SPF/DMARC records detected
- No PTR hostnames resolved
- No hosted domains
---
## Service Analysis
Open Ports: None detected
TLS/Certificates: No certificates observed
HTTP Services: No web services active
Server Banner: None
Service Purpose: Firewall protected / No services running
---
## Historical Observations
Observation History: 12 signals recorded (most recent: 2026-07-29)
Key Historical Notes:
- Ownership Changes: 0 (stable ownership)
- Threat Observation Count: 0
- Threat Persistence: Not persistently malicious
- Geographic Signals: Consistent GB classification with 40% confidence on recent probes
- Operator Score: 0.1304 (Minimal)
- Route Changes (30d): 0
Signal Timeline:
- ASN/RIR signals consistently identify RIPE region
- Geographic signals show GB country code
- Ownership records point to "Jeroen van veen" with abuse contact jeroen@falco-networks.com
---
## Relationship Graph
Connected Entities: 2 relationships identified
- Express-Equinix-London: Same network classification (2 entries)
---
## Neighborhood Analysis (185.192.71.0/24)
Subnet Statistics:
- Total Siblings: 83 IPs in /24
- Abuse Density: 0 (no subnet-wide abuse pattern)
- Risk Distribution:
- High Risk: 0 IPs
- Medium Risk: 1 IP
- Low Risk: 79 IPs
Notable Neighbors:
- 185.192.71.1: Risk 25, Authority 50
- 185.192.71.3: Risk 25, Authority 50
- 185.192.71.5: Risk 25, Authority 50
- 185.192.71.6: Risk 25, Authority 50
---
## Recommended Actions
For SOC Analysts:
- Monitoring: Continue baseline monitoring; no immediate threat action required
- Firewall Rules: No blocking recommended based on current risk profile
- Alerting: Not recommended for this IP (risk score 25, low risk classification)
- Investigation Priority: Low
Configuration Recommendations:
- No specific firewall rules required
- Standard network policies apply
- No WAF or Cloudflare blocking needed
---
## Conclusions
IP 185.192.71.65 presents a low-risk profile consistent with residential or hosting infrastructure. The address shows stable ownership characteristics, no active threat indicators, and resides in a subnet with minimal abuse density (0.13% high-risk IPs). Historical data confirms persistent benign behavior with no escalation in threat activity.
Threat Level: LOW
Recommended Action: No action required
Monitoring Status: Continue standard observation
---
*Intel produced by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Jeroen van veen |
| ASN | AS206092 |
| Network Name | Express-Equinix-London |
| CIDR Block | 185.192.71.0/24 |
| RIR | RIPE |
| Country | GB |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-24 14:26:08 UTC |
| Last Seen | 2026-07-29 23:44:18 UTC |
| Profile Built | 2026-07-29 23:57:33 UTC |
| Data Freshness | Live |
| Signal Types | 16 |
| Total Observations | 16 |
Full dossier details are available via our API.